All You Ever Wanted to Know about Dynamic Taint Analysis and Forward Symbolic Execution (but Might Have Been Afraid to Ask)

Taint Analysis of Security Code in the KLEE Symbolic Execution Engine

Information and Communications Security - Lecture Notes in Computer Science ◽

10.1007/978-3-642-34129-8_23 ◽

2012 ◽

pp. 264-275 ◽

Cited By ~ 7

Author(s):

Ricardo Corin ◽

Felipe Andrés Manzano

Keyword(s):

Symbolic Execution ◽

Taint Analysis ◽

Execution Engine

Download Full-text

Checksum-Aware Fuzzing Combined with Dynamic Taint Analysis and Symbolic Execution

ACM Transactions on Information and System Security ◽

10.1145/2019599.2019600 ◽

2011 ◽

Vol 14 (2) ◽

pp. 1-28 ◽

Cited By ~ 13

Author(s):

Tielei Wang ◽

Tao Wei ◽

Guofei Gu ◽

Wei Zou

Keyword(s):

Symbolic Execution ◽

Taint Analysis

Download Full-text

IoT Hacking – A Primer

Infocommunications journal ◽

10.36244/icj.2019.2.1 ◽

2019 ◽

pp. 2-13

Author(s):

Dorottya Papp ◽

Kristóf Tamás ◽

Levente Buttyán

Keyword(s):

Major Part ◽

Human Life ◽

Symbolic Execution ◽

The Internet ◽

Taint Analysis ◽

Penetration Testing ◽

Static And Dynamic Analysis ◽

Academic Researchers ◽

Iot Devices ◽

The Internet Of Things

The Internet of Things (IoT) enables many new and exciting applications, but it also creates a number of new risks related to information security. Several recent attacks on IoT devices and systems illustrate that they are notoriously insecure. It has also been shown that a major part of the attacks resulted in full adversarial control over IoT devices, and the reason for this is that IoT devices themselves are weakly protected and they often cannot resist even the most basic attacks. Penetration testing or ethical hacking of IoT devices can help discovering and fixing their vulnerabilities that, if exploited, can result in highly undesirable conditions, including damage of expensive physical equipment or even loss of human life. In this paper, we give a basic introduction into hacking IoT devices. We give an overview on the methods and tools for hardware hacking, firmware extraction and unpacking, and performing basic firmware analysis. We also provide a survey on recent research on more advanced firmware analysis methods, including static and dynamic analysis of binaries, taint analysis, fuzzing, and symbolic execution techniques. By giving an overview on both practical methods and readily available tools as well as current scientific research efforts, our work can be useful for both practitioners and academic researchers.

Download Full-text