DDE: Dynamic data structure excavation

Proceedings of the 1st ACM Asia-Pacific Workshop on Systems, APSys '10, Co-located with SIGCOMM 2010

Volumn , Issue , 2010, Pages 13-17

  Slowinska, Asia ^a   Stancescu, Traian ^a   Bos, Herbert ^a  

^a VU UNIVERSITY AMSTERDAM   (Netherlands)

Author keywords

binary; detecting data structures; dynamic analysis

Indexed keywords

EID: 78149333890     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1851276.1851280     Document Type: Conference Paper

References (14)

1. G. Balakrishnan and T. Reps. Analyzing memory accesses in x86 binary executables. In Proc. Conf. on Compiler Construction (CC), April 2004.
2. G. Balakrishnan and T. Reps. DIVINE: Discovering variables in executables. In Proc. Conf. on Verification Model Checking and Abstract Interpretation (VMCAI), January 2007.
3. G. Balakrishnan, T. Reps, D. Melski, and T. Teitelbaum. WYSINWYX: What you see is not what you execute. In In Verified Software: Theories, Tools, Experiments, page 1603, 2007.
4. F. Bellard. QEMU, a fast and portable dynamic translator. In Proc. of the USENIX Annual Technical Conference, 2005.
5. J. Caballero, H. Yin, Z. Liang, and D. Song. Polyglot: automatic extraction of protocol message format using dynamic binary analysis. In CCS '07: Proceedings of the 14th ACM conference on Computer and communications security, 2007.
6. C. Cadar, D. Dunbar, and D. Engler. KLEE: Unassisted and automatic generation of high-coverage tests for complex systems programs. In USENIX Symposium on Operating Systems Design and Implementation (OSDI 2008), 2008.
7. V. Chipounov and G. Candea. Reverse engineering of binary device drivers with RevNIC. In EuroSys '10: Proceedings of the 5th European conference on Computer systems, Paris, France, April 2010.
8. A. Cozzie, F. Stratton, H. Xue, and S. T. King. Digging for data structures. In USENIX Symposium on Operating Systems Design and Implementation (OSDI 2008, pages 255-266, San Diego, CA, December 2008.
9. DataRescue. High level constructs width IDA Pro. http://www.hex-rays.com/ idapro/ datastruct/datastruct.pdf, 2005.
10. M. V. Emmerik and T. Waddington. Using a decompiler for real-world source recovery. Working Conference on Reverse Engineering, 0:27-36, 2004.
11. Z. Lin, X. Zhang, and D. Xu. Automatic reverse engineering of data structures from binary execution. In Proceedings of the 17th Annual Network and Distributed System Security Symposium (NDSS'10), San Diego, CA, March 2010.
12. G. Ramalingam, J. Field, and F. Tip. Aggregate structure identification and its application to program analysis. In Proceedings of the 26th ACM SIGPLAN-SIGACT symposium on Principles of Programming Languages, 1999.
13. A. Slowinska, T. Stancescu, and H. Bos. Give me back my datastructures! - excavating data structures from stripped binaries. Technical Report IR-CS-57, Vrije Universiteit Amsterdam, May 2010.
14. A. Slowinska, T. Stancescu, and H. Bos. Precise data structure excavation. Technical Report IR-CS-55, Vrije Universiteit Amsterdam, February 2010.