Towards Efficient Heap Overflow Discovery
summary
HOTracer analyzes recorded program execution traces from binaries to detect heap overflows by modeling them as spatial mismatches between where heap memory is allocated and where it’s accessed. It performs offline, in-depth trace analysis with optimizations to efficiently find overflows that runtime fuzzing or detector engines might miss, and the prototype found 47 previously unknown heap vulnerabilities across 17 real-world applications.
AI-written summary · about
related talks
22mHeapHopper: Bringing Bounded Model Checking to Heap Implementation Security
48mDPTrace: Dual Purpose Trace for Exploitability Analysis of Program Crashes
15mTAILCHECK: A Lightweight Heap Overflow Detection Mechanism with Page Protection and...
39mGreybox Automatic Exploit Generation for Heap Overflows
37mHeap Layout Optimisation for Exploitation
15mMemoryTrap: Booby Trapping Memory to Counter Memory Disclosure Attacks with...
01h 00mIntroduction to memory exploitation
21mAutomatic Heap Layout Manipulation for Exploitation