Matches in SemOpenAlex for { <https://semopenalex.org/work/W2470989862> ?p ?o ?g. }
- W2470989862 endingPage "184" @default.
- W2470989862 startingPage "164" @default.
- W2470989862 abstract "Dynamic binary analysis is a prevalent and indispensable technique in program analysis. While several dynamic binary analysis tools and frameworks have been proposed, all suffer from one or more of: prohibitive performance degradation, a semantic gap between the analysis code and the program being analyzed, architecture/OS specificity, being user-mode only, and lacking APIs. We present DECAF, a virtual machine based, multi-target, whole-system dynamic binary analysis framework built on top of QEMU. DECAF provides Just-In-Time Virtual Machine Introspection and a plugin architecture with a simple-to-use event-driven programming interface. DECAF implements a new instruction-level taint tracking engine at bit granularity, which exercises fine control over the QEMU Tiny Code Generator (TCG) intermediate representation to accomplish on-the-fly optimizations while ensuring that the taint propagation is sound and highly precise. We perform a formal analysis of DECAF's taint propagation rules to verify that most instructions introduce neither false positives nor false negatives. We also present three platform-neutral plugins-Instruction Tracer, Keylogger Detector, and API Tracer, to demonstrate the ease of use and effectiveness of DECAF in writing cross-platform and system-wide analysis tools. Implementation of DECAF consists of 9,550 lines of C++ code and 10,270 lines of C code and we evaluate DECAF using CPU2006 SPEC benchmarks and show average overhead of 605 percent for system wide tainting and 12 percent for VMI." @default.
- W2470989862 created "2016-07-22" @default.
- W2470989862 creator A5032634880 @default.
- W2470989862 creator A5059808138 @default.
- W2470989862 creator A5061647216 @default.
- W2470989862 creator A5073376805 @default.
- W2470989862 creator A5075634203 @default.
- W2470989862 creator A5078041729 @default.
- W2470989862 date "2017-02-01" @default.
- W2470989862 modified "2023-10-03" @default.
- W2470989862 title "DECAF: A Platform-Neutral Whole-System Dynamic Binary Analysis Platform" @default.
- W2470989862 cites W1818793721 @default.
- W2470989862 cites W1821004526 @default.
- W2470989862 cites W1977764760 @default.
- W2470989862 cites W2048134700 @default.
- W2470989862 cites W2089745089 @default.
- W2470989862 cites W2103919170 @default.
- W2470989862 cites W2108747667 @default.
- W2470989862 cites W2113489899 @default.
- W2470989862 cites W2114780348 @default.
- W2470989862 cites W2129487583 @default.
- W2470989862 cites W2133217855 @default.
- W2470989862 cites W2135162105 @default.
- W2470989862 cites W2137530017 @default.
- W2470989862 cites W2138580357 @default.
- W2470989862 cites W2140807364 @default.
- W2470989862 cites W2144344516 @default.
- W2470989862 cites W2156858199 @default.
- W2470989862 cites W2159702664 @default.
- W2470989862 cites W2260302358 @default.
- W2470989862 cites W4239813889 @default.
- W2470989862 doi "https://doi.org/10.1109/tse.2016.2589242" @default.
- W2470989862 hasPublicationYear "2017" @default.
- W2470989862 type Work @default.
- W2470989862 sameAs 2470989862 @default.
- W2470989862 citedByCount "37" @default.
- W2470989862 countsByYear W24709898622016 @default.
- W2470989862 countsByYear W24709898622017 @default.
- W2470989862 countsByYear W24709898622018 @default.
- W2470989862 countsByYear W24709898622019 @default.
- W2470989862 countsByYear W24709898622020 @default.
- W2470989862 countsByYear W24709898622021 @default.
- W2470989862 countsByYear W24709898622022 @default.
- W2470989862 countsByYear W24709898622023 @default.
- W2470989862 crossrefType "journal-article" @default.
- W2470989862 hasAuthorship W2470989862A5032634880 @default.
- W2470989862 hasAuthorship W2470989862A5059808138 @default.
- W2470989862 hasAuthorship W2470989862A5061647216 @default.
- W2470989862 hasAuthorship W2470989862A5073376805 @default.
- W2470989862 hasAuthorship W2470989862A5075634203 @default.
- W2470989862 hasAuthorship W2470989862A5078041729 @default.
- W2470989862 hasBestOaLocation W24709898621 @default.
- W2470989862 hasConcept C111919701 @default.
- W2470989862 hasConcept C115168132 @default.
- W2470989862 hasConcept C149635348 @default.
- W2470989862 hasConcept C169590947 @default.
- W2470989862 hasConcept C199360897 @default.
- W2470989862 hasConcept C25344961 @default.
- W2470989862 hasConcept C2777904410 @default.
- W2470989862 hasConcept C33923547 @default.
- W2470989862 hasConcept C41008148 @default.
- W2470989862 hasConcept C48372109 @default.
- W2470989862 hasConcept C63116202 @default.
- W2470989862 hasConcept C63435697 @default.
- W2470989862 hasConcept C94375191 @default.
- W2470989862 hasConcept C97686452 @default.
- W2470989862 hasConceptScore W2470989862C111919701 @default.
- W2470989862 hasConceptScore W2470989862C115168132 @default.
- W2470989862 hasConceptScore W2470989862C149635348 @default.
- W2470989862 hasConceptScore W2470989862C169590947 @default.
- W2470989862 hasConceptScore W2470989862C199360897 @default.
- W2470989862 hasConceptScore W2470989862C25344961 @default.
- W2470989862 hasConceptScore W2470989862C2777904410 @default.
- W2470989862 hasConceptScore W2470989862C33923547 @default.
- W2470989862 hasConceptScore W2470989862C41008148 @default.
- W2470989862 hasConceptScore W2470989862C48372109 @default.
- W2470989862 hasConceptScore W2470989862C63116202 @default.
- W2470989862 hasConceptScore W2470989862C63435697 @default.
- W2470989862 hasConceptScore W2470989862C94375191 @default.
- W2470989862 hasConceptScore W2470989862C97686452 @default.
- W2470989862 hasFunder F4320306076 @default.
- W2470989862 hasFunder F4320308253 @default.
- W2470989862 hasIssue "2" @default.
- W2470989862 hasLocation W24709898621 @default.
- W2470989862 hasLocation W24709898622 @default.
- W2470989862 hasOpenAccess W2470989862 @default.
- W2470989862 hasPrimaryLocation W24709898621 @default.
- W2470989862 hasRelatedWork W1564075167 @default.
- W2470989862 hasRelatedWork W1567762309 @default.
- W2470989862 hasRelatedWork W1603528014 @default.
- W2470989862 hasRelatedWork W17989877 @default.
- W2470989862 hasRelatedWork W2087647198 @default.
- W2470989862 hasRelatedWork W2360884399 @default.
- W2470989862 hasRelatedWork W2367240299 @default.
- W2470989862 hasRelatedWork W2374683413 @default.
- W2470989862 hasRelatedWork W2374742111 @default.
- W2470989862 hasRelatedWork W2907724967 @default.
- W2470989862 hasVolume "43" @default.