Using Binary Code Instrumentation in Computer Security

Mobile Code Security by Java Bytecode Instrumentation

Mobile code provides significant opportunities and risks. Java bytecode is used to provide executable content to web pages and is the basis for dynamic service configuration in the Jini framework. While the Java Virtual Machine includes a bytecode verifier that checks bytecode programs before execution, and a bytecode interpreter that performs run-time tests, mobile code may still behave in way...

Computer security in the future

Until recently, computer security was an obscure discipline that seemed to have little relevance to everyday life. With the rapid growth of the Internet, e-commerce, and the widespread use of computers, computer security touches almost all aspects of daily life and all parts of society. Even those who do not use computers have information about them stored on computers. This paper reviews some ...

Learning to Analyze Binary Computer Code

We present a novel application of structured classification: identifying function entry points (FEPs, the starting byte of each function) in program binaries. Such identification is the crucial first step in analyzing many malicious, commercial and legacy software, which lack full symbol information that specifies FEPs. Existing pattern-matching FEP detection techniques are insufficient due to ...

Finding and remedying high-level security issues in binary code

Interactive Binary Instrumentation

In this paper we present a new model for instrumenting a process on the fly. We describe a command line tool developed by our research group based on our instrumentation library, Dyninst. With this model the user no longer needs to have a full set of mutations planned out ahead of time. The command line interface allows the user to mutate a process, gather data, and generate new mutations while...