Automatic vulnerability locating in binary patches

CIS 2009 - 2009 International Conference on Computational Intelligence and Security

Volumn 2, Issue , 2009, Pages 474-477

  Song, Yang ^a   Zhang, Yuqing ^a   Sun, Yingfei ^a  

^a UNIVERSITY OF CHINESE ACADEMY OF SCIENCES   (China)

Author keywords

Audit; Patch; Security; Vulnerability

Indexed keywords

EXECUTABLE FILES; REAL-WORLD; SECURITY VULNERABILITIES;

ARTIFICIAL INTELLIGENCE; SET THEORY;

SECURITY OF DATA;

EID: 77949332420     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CIS.2009.273     Document Type: Conference Paper

References (14)

1. D. Brumley, P. Poosankam, D. Song, and J. Zheng. Automatic patch-based exploit generation is possible: techniques and implications. In Proceedings of the 2008 IEEE Symposium on Security and Privacy, 2008.
2. D. Brumley. Analysis and Defense of Vulnerabilities in Binary Code. School of Computer Science, Carnegie Mellon University. Sep 2008.
3. H. FLAKE. Structural Comparison of Executable Objects. In Proceedings of the GI International Conference on Detection of Intrusions & Malware, and Vulnerability Assessment, 2004.
4. T. Dullien and R. Rolles. Graph-based comparison of executable objects. In Proceedings of SSTIC, 2005.
5. T. Sabin. Comparing Binaries with Graph Isomorphisms. Available: http://razor.bindview.com/publish/papers/comparingbinaries. html
6. eEye Digital Security. EBDS. Available: http://research.eeye.com/html/ tools/RT20060801-1.html
7. Zynamics. BinDiff. Available: http://www.zynamics.com/bindiff.html
8. iDefense Labs. Static analysis software tools. Available: http://labs.idefense.com/software/static.php
9. G. Debian, R. Michael, and S. Dawn. Binhunt: Automatically finding semantic differences in binary programs. In Proceedings of the International Conference on Information and Communications Security, 2008.
10. D. Callahan et al. Constructing the procedure call multigraph. IEEE Transactions on Software Engineering, vol.16, no.4 pp.483-487, Apr 1990.
11. DataRescue Inc. IDA Pro. Available: http://www.datarescue.com
12. Wikipedia. Basic block. Available: http://en.wikipedia.org/wiki/Basic block
13. L. Bergroth and H. Hakonen and T. Raita . A Survey of Longest Common Subsequence Algorithms. In Proceedings of the Seventh International Symposium on String Processing Information Retrieval, 2000.
14. Microsoft TechNet. Microsoft Security Bulletin MS08-067. Available: http://www.microsoft.com/technet/security/bulletin/ms08-067.mspx