Dynamic Data Flow Analysis via Virtual Code Integration (aka The SpiderPig case)

Computer Science – Cryptography and Security

Scientific paper

Rate now

  [ 0.00 ] – not rated yet Voters 0   Comments 0

Details

48 pages

Scientific paper

Paper addresses the process of dynamic data flow analysis using virtual code integration (VCI), often refered to as dynamic binary rewriting. This article will try to demonstrate all of the techniques that were applied in the SpiderPig project. It will also discuss the main differences between the methods that were employed and those used in other available software, as well as introducing other related work. SpiderPig's approach was found to be very fast and was transparent enough for reliable and usable data flow analysis. It was created with the purpose of providing a tool which would aid vulnerability and security researchers with tracing and analyzing any necessary data and its further propagation through a program. At the current state it works on IA-32 platforms with Microsoft Windows systems and it supports FPU, SSE, MMX and all of the IA-32 general instructions. SpiderPig also demonstrates the usage of a virtual code integration (VCI) framework which allows for modifying the target application code at the instruction level. By this I mean that the VCI framework allows for custom code insertion, original code modification and full customization of the original application's code. Instructions can be swapped out, deleted or modified at a whim, without corrupting the surrounding code and side-effects of the modification are resolved.

No associations

LandOfFree

Say what you really think

Search LandOfFree.com for scientists and scientific papers. Rate them and share your experience with other people.

Rating

Dynamic Data Flow Analysis via Virtual Code Integration (aka The SpiderPig case) does not yet have a rating. At this time, there are no reviews or comments for this scientific paper.

If you have personal experience with Dynamic Data Flow Analysis via Virtual Code Integration (aka The SpiderPig case), we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Dynamic Data Flow Analysis via Virtual Code Integration (aka The SpiderPig case) will most certainly appreciate the feedback.

Rate now

     

Profile ID: LFWR-SCP-O-194158

  Search
All data on this website is collected from public sources. Our data reflects the most accurate information available at the time of publication.