BeStart / Papers

Some papers about cyber security

Papers

整理所学习的 Paper，暂且分为 AEG、Crash Analysis、Symbolic Execution、Fuzzing、Other 五类。

AEG

1）论文

• - 《(State of) The Art of War: Offensive Techniques in Binary Analysis》
• - 《AEG: Automatic Exploit Generation》
• - 《CRAX: Software Crash Analysis for Automatic Exploit Generation by Modeling Attacks as Symbolic Continuations》
• - 《Automatic Polymorphic Exploit Generation for Software Vulnerabilities》
• - 《Unleashing MAYHEM on Binary Code》
• - 《Q: Exploit Hardening Made Easy》
• - 《Revery: From Proof-of-Concept to Exploitable》
• - 《Automatic Generation of Control Flow Hijacking Exploits for Software Vulnerabilities》
• - 《Automatic Heap Layout Manipulation for Exploitation》
• - 《Survey of Automated Vulnerability Detection and Exploit Generation Techniques in Cyber Reasoning Systems》
• - 《Data-Oriented programming: On the expresivenes of non-control data attacks》
• - 《Automatic Generation of Data-Oriented Exploits》

2）资料

• - (PPT)《Binary 自動分析的那些事》
• - (PPT)《Automatic Exploit Generation》
• - (PPT)《The Automated Exploitation Grand Challenge》
• - (PPT)《An Introduction to Dynamic Symbolic Execution and the KLEE Infrastructure》
• - (PPT)《An Introduction To Binary Exploitation》
• - (PPT)《The Automated Exploitation Grand Challenge A Five-Year Retrospective》
• - (PPT)《automatic binary exploitation and patching using mechanical shellphish.pdf》
• - 《The Mayhem CRS》

Crash Analysis

1）论文

• - 《BitBlaze：A New Approach to Computer Security via Binary Analysis》
• - 《Which Crashes Should I Fix First?: Predicting Top Crashes at an Early Stage to Prioritize Debugging Efforts》

2）资料

• - 《Crash analysis with BitBlaze》

Symbolic Execution

1）论文

• - 《SAT SMT by example》
• - 《SMT Solvers for Software Security》

2）资料

• - (PPT)《Intro to Binary Analysis with Z3 and Angr》
• - (PPT)《symbolic execution》
• - (PPT)《Understanding Symbolic Execution》

Fuzzing

1）论文

• - 《Fuzzing: a survey》
• - 《A systematic review of fuzzing techniques》
• - 《Driller: Augmenting Fuzzing Through Selective Symbolic Execution》

2）资料

• - 《Fuzzing技术总结与工具列表》

Other

1）论文

• - 《软件与网络安全研究综述》
• - 《CBTracer: Continuously Building Datasets for Binary Vulnerability and Exploit Research》
• - 《人工智能技术在安全漏洞领域的应用》

2）资料

• - 《Transformation-aware Exploit Generation using a HI-CFG》
• - 《Shining Light onShadow Stacks》新影子栈设计