~/talk

Analyzing Bytes: Pre-Disassembly Static Binary Analysis

Talkat PLDI 2026 · 2026-06-15..06-19· [security]
links:none on file
links:none on file
links:none on file
name:R. Sekar
links:none on file
slides:none on file

Built a pre-disassembly analyzer (AMaze) that runs a backward dataflow on an super-set control-flow graph that treats every byte offset as a potential instruction, computes path properties like stack-depth and register-preservation, and returns results for every offset in O(n) per binary. Evaluation on standard corpora shows ~700–1000× speedups (300k offsets in ~1 minute, ~2 GB RAM) and accuracy comparable to Angr/Ghidra/Dyninst by exploiting backward path fidelities.

AI-written summary · about

  1. 0:00Binary analysis challenges
  2. 1:05Reverse engineering limits
  3. 2:51Disassembly scalability issues
  4. 4:33Code-data separation struggles
  5. 6:16Path properties for binary analysis
  6. 8:43Static analysis challenges
  7. 9:46Backward analysis linear time
  8. 11:55Backward path fidelities
  9. 13:43Evaluation methodology
  10. 15:54Conclusion and demo
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.