Bugtraq mailing list archives

PAPER: Dynamic Data Flow Analysis via Virtual Code Integration (aka The SpiderPig case)


From: "Piotr Bania" <bania.piotr () gmail com>
Date: Mon, 18 May 2009 14:32:01 +0200

SpiderPig is a project created for performing and visualizing data flow analysis of a selected binary program. SpiderPig was created in the purpose of providing a tool which would be able to help vulnerability and security researchers with tracing and analyzing any necessary data and it's further propagation. Such tasks are very often crucial in the vulnerability discovering/identifying process and typically require a lot of time consuming manual work. Following paper discusses methods and techniques implemented in SpiderPig in order to perform semi-automatic data flow analysis.

Paper is available here:
http://piotrbania.com/all/spiderpig/pbania-spiderpig2008.pdf


Simple video demo and some other things available on project website:
http://piotrbania.com/all/spiderpig/


best regards,
Piotr Bania

--
--------------------------------------------------------------------
Piotr Bania - <bania.piotr () gmail com> - 0xCD, 0x19
Fingerprint: 413E 51C7 912E 3D4E A62A  BFA4 1FF6 689F BE43 AC33
http://www.piotrbania.com  - Key ID: 0xBE43AC33
--------------------------------------------------------------------

              - "The more I learn about men, the more I love dogs."


P.S Did ya know adult pigs can run at speeds of up to 11 miles an hour?


Current thread: