Locating vulnerabilities is an important task for security auditing, exploit writing, and code
hardening. However, it is challenging to locate vulnerabilities in binary code, because most …

Binary fault localization is important for vulnerability analysis, but many current techniques
face problems in locating vulnerability accurately and effectively, especially for real-world …

Many modern defenses rely on address space layout randomization (ASLR) to efficiently
hide security-sensitive metadata in the address space. Absent implementation flaws, an …

After a program has crashed and terminated abnormally, it typically leaves behind a
snapshot of its crashing state in the form of a core dump. While a core dump carries a large …

In spite of their effectiveness in the context of vulnerability discovery, current state-of-the-art
binary program analysis approaches are limited by inherent trade-offs between accuracy …

More than two decades after the first stack smashing attacks, memory corruption
vulnerabilities utilizing stack anomalies are still prevalent and play an important role in …

Unsafe memory accesses in programs written using popular programming languages like
C/C++ have been among the leading causes for software vulnerability. Prior memory safety …

Unsafe memory accesses in programs written using popular programming languages like C
and C++ have been among the leading causes of software vulnerability. Memory safety …

The binary-level function matching has been widely used to detect whether there are 1-day
vulnerabilities in released programs. However, the high false positive is a challenge for …

Software vulnerabilities still constitute a high security risk and there is an ongoing race to
patch known bugs. However, especially in closed-source software, there is no …