论文阅读 -- "Igor- Crash Deduplication Through Root-Cause Clustering"

Author: Zhiyuan Jiang NUDT Xiyue Jiang NUDT Ahmad Hazimeh
Code: https://github.com/HexHive/Igor
Introducetion: 覆盖减少模糊器+CFG相似性度量,对crash进行聚类
Topic: Crash Bucket, Root Cause
Where: CCS 2021
Year: 2021

阅读更多
LibFuzzer 基础使用

————

阅读更多
论文阅读 -- "AURORA - Statistical Crash Analysis for Automated Root Cause Explanation"

Author: Tim Blazytko, Moritz Schlögel, Cornelius Aschermann, Ali Abbasi, Joel Frank, Simon Wörner, and Thorsten Holz, Ruhr-Universität Bochum
Code: https://github.com/RUB-SysSec/aurora
Topic: Root Cause
URL: https://www.usenix.org/conference/usenixsecurity20/presentation/blazytko
Where: 29th USENIX Security Symposium
Year: 2020
Introducetion: 根因分析:一种采用Fuzz+动态执行+数理统计的方法

阅读更多
论文阅读 -- "POMP- Postmortem Program Analysis with Hardware-Enhanced Post-Crash Artifacts"

Author: Jun Xu, The Pennsylvania State University;
Code: https://github.com/junxzm1990/pomp
Topic: Root Cause, Taint
URL: https://www.usenix.org/conference/usenixsecurity17/technical-sessions/presentation/xu-jun
Where: 26th USENIX Security Symposium
Year: 2017
Introducetion: 根因分析:使用了数据流、反向污点分析

阅读更多
论文阅读 -- "All You Ever Wanted to Know About Dynamic Taint Analysis and Forward Symbolic Execution"

Author: Edward J. Schwartz, Thanassis Avgerinos, David Brumley Carnegie Mellon University
Topic: Dynamic, Sym_exe, Taint
URL: https://ieeexplore.ieee.org/document/5504796?reload=true
Where: IEEE Symposium on Security and Privacy
Year: 2010
Introducetion: 介绍了动态污点分析及符号执行,总结了这些技术的框架及关键问题

阅读更多
AFL插桩(二)LLVM模式插桩

————

阅读更多
AFL插桩(一)概述与普通插桩

————

阅读更多
03-LLVM Pass使用(传统Pass)

本文按照LLVM官网编写Pass(旧版)的入门教程进行实验,对LLVM Pass进行初步的学习了解,并解决实验中遇到的问题,官网教程链接如下:
https://llvm.org/docs/WritingAnLLVMPass.html

阅读更多
02-LLVM IR 基础(持续更新)

LLVM IR官方文档:https://llvm.org/docs/Reference.html#llvm-ir

本文只是学习并记录笔记,如有错误或不足请谅解指正,谢谢!

阅读更多
01-LLVM概述及简单使用

LLVM是构架编译器(compiler)的框架系统,以C++编写而成,用于优化以任意程序语言编写的程序的编译时间(compile-time)、链接时间(link-time)、运行时间(run-time)以及空闲时间(idle-time),对开发者保持开放,并兼容已有脚本。是模块化和可重用的编译器和工具链技术的集合.

阅读更多