Detecting and exploiting integer overflows.pdf

(493 KB) Pobierz
Outline
Introduction to integer overflows
Automated detection
Conclusion
Detecting and exploiting integer overflows
Guillaume TOURON
Laboratoire Verimag, Ensimag - Grenoble INP
Marie-Laure Potet, Laurent Mounier
20/05/11
1 / 18
Outline
Introduction to integer overflows
Automated detection
Conclusion
Introduction to integer overflows
Context
Binary representation
Integers misinterpretation
Automated detection
Static binary analysis
Data flow analysis
Implementation
Conclusion
2 / 18
Outline
Introduction to integer overflows
Automated detection
Conclusion
Context
Binary representation
Integers misinterpretation
Work subject
Subject
Binary code static analysis for vulnerabilities detection
Focus on arithmetic problems
Application security is critical for information systems
Programming bad practices
Goals
Work with a professional environment :
IDA Pro
Develop some analysis to make easier vulnerabilities detection
3 / 18
Outline
Introduction to integer overflows
Automated detection
Conclusion
Context
Binary representation
Integers misinterpretation
Work subject
Subject
Binary code static analysis for vulnerabilities detection
Focus on arithmetic problems
Application security is critical for information systems
Programming bad practices
Goals
Work with a professional environment :
IDA Pro
Develop some analysis to make easier vulnerabilities detection
3 / 18
Outline
Introduction to integer overflows
Automated detection
Conclusion
Context
Binary representation
Integers misinterpretation
Work subject
Subject
Binary code static analysis for vulnerabilities detection
Focus on arithmetic problems
Application security is critical for information systems
Programming bad practices
Goals
Work with a professional environment :
IDA Pro
Develop some analysis to make easier vulnerabilities detection
3 / 18

Plik z chomika:

Inne pliki z tego folderu:

Inne foldery tego chomika:

Zgłoś jeśli naruszono regulamin