《Emulation Based Analysis》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。
1、Emula&on based analysis using binary instrumenta&on Applica&on on CTF 1SPEAKERS 2Myunghun Cha •From Republic of Korea •POSTECH senior student majoring CSE •Team Leader of PLUS •CODEGATE 2009 Hacking Contest 3rd place •DEFCON 2009 CTF 3rd place •DEFCON 2011 CTF 8th place
2、 •Many hacking contest experience 3Jinsuk Park •POSTECH sophomore majoring ME •Team member of PLUS 4PLUS •POSTECH Laboratory for UNIX Security •Found in 1992 •Researching on various security issues •Par&cipa&ng in lots of hacking contests •Par&cipated in DEFCON CTF three
3、 &mes –2009 (3rd ) –2010 (3rd) –2011 (8th) –2012 5Mo&va&on DEFCON CTF 6CTF Basic Rule •CTF : Capture The Flag •Each team is given vulnerable server •Vulnerable daemons are running on the server Vulnerability 7CTF Daemon 문제89Scoring •There’s a key file for each daemon whic
4、h is changed periodically •You should read or write the key file to get a score •It simulates informa&on stealling and corrup&on in real world 10CTF Network Given two lan cables 11CTF Network NetworkCTF Summary •Wecan a^ack over the wire •We can sniff, suspect, or drop pac
5、ket •We can a^ack analyzing binary or using otherteams’ exploit What do I want to do? •I want to detect a^acks •I want to analyze vulnerability easily using other teams’ a^ack •Then… how? EMULATION BASED ANALYSIS Emula&on Based Analysis •We
6、can detect bug following specific pa^erns –Stack boundary check –memcpy without string length check –EIP address check –Format string from user input •Verifica&on user input is much more easier than finding hidden bug •Dynamic analysis is easier than sta&c analysis Instrume
7、nta&on?Dynamic Binary Instrumenta&on•Ability to monitor or measure the level of a program's performance, to diagnose errors and to write trace informa&on Dynamic Binary Instrumenta&on•A technique to analyze and modify the behavior of a binary program by injec&ng arbitrar
8、y code at arbitrary places while it is execuCngUsage•Simula&on / Emula&on •Performance Analysis •Progra
