NDLI: Ewap: Using Symbolic Execution to Exploit Windows Applications

Content Provider	IEEE Xplore Digital Library
Author	Jianmin Chen Hui Shu Xiaobing Xiong
Copyright Year	2009
Abstract	In this pager we describe a new approach using symbolic execution to exploit windows applications, and the approach is implemented in the tool Ewap. Instead of fuzzing applications with randomly or semi-randomly constructed input, Ewap generates new inputs automatically to steer applications to follow different execution paths and detects security violations dynamically, which maximizes the code coverage and improves the exploiting efficiency. Based on a Dynamic Binary Monitor Platform (DBMP), Ewap analyzes and instruments the binary codes of target applications dynamically. During the execution process, the instrumented code traces data flows with an improved taint analysis mechanism and accomplishes two tasks: 1) generating path constraints used for symbolic execution, 2) detecting security violations. During the implementing of Ewap, the key technologies including IR-based instrumentation, taint analysis mechanism, symbolic execution and violations detection are introduced and adopted. We implement some experiments on several benchmarks, and the experimental data demonstrate that Ewap is reasonable in overhead and improves the code coverage and exploiting efficiency.
Starting Page	733
Ending Page	738
File Size	371619
Page Count	6
File Format	PDF
ISBN	9780769535074
DOI	10.1109/CSIE.2009.544
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2009-03-31
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Instruments Data security Application software Computer science Information science code instrumentation security violations detection Computer bugs Information security Binary codes symbolic execution taint analysis mechanism Monitoring Testing
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

SymWalker: Symbolic Execution in Routines of Binary Code

Context-sensitive detection of information exposure bugs with symbolic execution

Hunter: Online Accurate Taint Propagation Analysis Based System for Detecting Bugs in Binaries

Automatic software vulnerability detection based on guided deep fuzzing

Unleashing Mayhem on Binary Code

Efficient Taint Analysis with Taint Behavior Summary

Static Detection of Vulnerabilities in x86 Executables

CRAX: Software Crash Analysis for Automatic Exploit Generation by Modeling Attacks as Symbolic Continuations

Monitoring the Security Health of Software Systems

Ewap: Using Symbolic Execution to Exploit Windows Applications

Similar Documents

SymWalker: Symbolic Execution in Routines of Binary Code

Context-sensitive detection of information exposure bugs with symbolic execution

Hunter: Online Accurate Taint Propagation Analysis Based System for Detecting Bugs in Binaries

Automatic software vulnerability detection based on guided deep fuzzing

Unleashing Mayhem on Binary Code

Efficient Taint Analysis with Taint Behavior Summary

Static Detection of Vulnerabilities in x86 Executables

CRAX: Software Crash Analysis for Automatic Exploit Generation by Modeling Attacks as Symbolic Continuations

Monitoring the Security Health of Software Systems

Ewap: Using Symbolic Execution to Exploit Windows Applications