[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Full-disclosure] PAPER: Dynamic Data Flow Analysis via Virtual Code Integration (aka The SpiderPig case)



SpiderPig is a project created for performing and visualizing data flow 
analysis of a selected binary program. SpiderPig was created in the purpose 
of providing a tool which would be able to help vulnerability and security 
researchers with tracing and analyzing any necessary data and it's further 
propagation. Such tasks are very often crucial in the vulnerability 
discovering/identifying process and typically require a lot of time 
consuming manual work. Following paper discusses methods and techniques 
implemented in SpiderPig in order to perform semi-automatic data flow 
analysis.

Paper is available here:
http://piotrbania.com/all/spiderpig/pbania-spiderpig2008.pdf


Simple video demo and some other things available on project website:
http://piotrbania.com/all/spiderpig/


best regards,
Piotr Bania

-- 
--------------------------------------------------------------------
Piotr Bania - <bania.piotr@xxxxxxxxx> - 0xCD, 0x19
Fingerprint: 413E 51C7 912E 3D4E A62A  BFA4 1FF6 689F BE43 AC33
http://www.piotrbania.com  - Key ID: 0xBE43AC33
--------------------------------------------------------------------

               - "The more I learn about men, the more I love dogs."


P.S Did ya know adult pigs can run at speeds of up to 11 miles an hour?

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/