메뉴 건너뛰기




Volumn , Issue , 2009, Pages 43-52

NTrace: Function boundary tracing for windows on IA-32

Author keywords

Operating system kernels; Reverse engineering; Software debugging

Indexed keywords

BOUNDARY TRACING; CONTROL FLOWS; ENABLING TECHNIQUES; EXCEPTION HANDLING; MALWARES; OPERATING SYSTEM KERNEL; OPERATING SYSTEM KERNELS; REVERSE ENGINEERING TOOLS;

EID: 73449097126     PISSN: 10951350     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/WCRE.2009.12     Document Type: Conference Paper
Times cited : (8)

References (21)
  • 1
    • 63149096026 scopus 로고    scopus 로고
    • Intel 64 and IA-32 Architectures Software Developer's Manual
    • Intel Corporation, Part 2
    • Intel Corporation, Intel 64 and IA-32 Architectures Software Developer's Manual, 2007, vol. 3B: System Programming Guide, Part 2.
    • (2007) System Programming Guide , vol.3 B
  • 2
    • 0028424965 scopus 로고
    • Shade: A fast instruction-set simulator for execution profiling
    • May, Online, Available
    • R. Cmelik and D. Keppel, "Shade: A fast instruction-set simulator for execution profiling," ACM SIGMETRICS Performance Evaluation Review, vol. 22, no. 1, pp. 128-137, May 1994. [Online]. Available: citeseer.comp.nus.edu.sg/ 175806.html
    • (1994) ACM SIGMETRICS Performance Evaluation Review , vol.22 , Issue.1 , pp. 128-137
    • Cmelik, R.1    Keppel, D.2
  • 5
    • 0039088052 scopus 로고    scopus 로고
    • Fine-grained dynamic instrumentation of commodity operating system kernels
    • Online, Available
    • A. Tamches and B. P. Miller, "Fine-grained dynamic instrumentation of commodity operating system kernels," in Operating Systems Design and Implementation, 1999, pp. 117-130. [Online]. Available: citeseer.ist.psu. edu/article/tamches99finegrained.html
    • (1999) Operating Systems Design and Implementation , pp. 117-130
    • Tamches, A.1    Miller, B.P.2
  • 9
    • 33646408973 scopus 로고    scopus 로고
    • A crash course on the depths of win32 structured exception handling
    • January, Online, Available: http
    • M. Pietrek, "A crash course on the depths of win32 structured exception handling," Microsoft Systems Journal, vol. 12, no. 1, January 1997. [Online]. Available: http: //www.microsoft.com/msj/0197/Exception/ Exception.aspx
    • (1997) Microsoft Systems Journal , vol.12 , Issue.1
    • Pietrek, M.1
  • 10
    • 73449118190 scopus 로고    scopus 로고
    • K. Brown, Building a Lightweight COM Interception Framework, Part I: The Universal Delegator, Microsoft Systems Journal, 14 No 1, 1999, uRL http://www.microsoft.com/ msj/0199/intercept/intercept.aspx, retrieved 10.04.2008.
    • K. Brown, "Building a Lightweight COM Interception Framework, Part I: The Universal Delegator," Microsoft Systems Journal, Vol 14 No 1, 1999, uRL http://www.microsoft.com/ msj/0199/intercept/intercept.aspx, retrieved 10.04.2008.
  • 11
    • 73449096357 scopus 로고    scopus 로고
    • O. O. S. Resources, OSR's IRPTracker - Tracking the Life of an IRP in Detail, pp. 10-11, 2003.
    • O. O. S. Resources, "OSR's IRPTracker - Tracking the Life of an IRP in Detail," pp. 10-11, 2003.
  • 12
    • 26944465062 scopus 로고    scopus 로고
    • Dynamic binary analysis and instrumentation,
    • Ph.D. dissertation, Trinity College, University of Cambridge
    • N. Nethercote, "Dynamic binary analysis and instrumentation," Ph.D. dissertation, Trinity College, University of Cambridge, 2004.
    • (2004)
    • Nethercote, N.1
  • 13
    • 31944438135 scopus 로고    scopus 로고
    • Efficient, transparent, and comprehensive runtime code manipulation,
    • Ph.D. dissertation, Massachusetts Institute of Technology
    • D. L. Bruening, "Efficient, transparent, and comprehensive runtime code manipulation," Ph.D. dissertation, Massachusetts Institute of Technology, 2004.
    • (2004)
    • Bruening, D.L.1
  • 18
    • 5544275267 scopus 로고
    • Dynamic program instrumentation for scalable performance tools,
    • Tech. Rep. CS-TR-1994-1207, Online, Available
    • J. K. Hollingsworth, B. P. Miller, and J. Cargille, "Dynamic program instrumentation for scalable performance tools," Tech. Rep. CS-TR-1994-1207, 1994. [Online]. Available: citeseer.ist.psu.edu/75570.html
    • (1994)
    • Hollingsworth, J.K.1    Miller, B.P.2    Cargille, J.3
  • 21
    • 73449104177 scopus 로고    scopus 로고
    • M. E. Russinovich and D. A. Solomon, Microsoft Windows Internals, 4th ed. One Microsoft Way, Redmond, Washington 98052-6399: Microsoft Press, 2005.
    • M. E. Russinovich and D. A. Solomon, Microsoft Windows Internals, 4th ed. One Microsoft Way, Redmond, Washington 98052-6399: Microsoft Press, 2005.


* 이 정보는 Elsevier사의 SCOPUS DB에서 KISTI가 분석하여 추출한 것입니다.