Fuzzing is one of the most effective approaches to finding software flaws. However, applying
it to microcontroller firmware incurs many challenges. For example, rehosting-based …

Malware authors are abusing packers (or runtime-based obfuscators) to protect malicious
apps from being analyzed. Although many unpacking tools have been proposed, they can …

More and more Android apps implement their functionalities in native code, so does
malware. Although various approaches have been designed to analyze the native code …

Cloud attack provenance is a well-established industrial practice for assuring transparency
and accountability for a service provider to tenants. However, the multi-tenancy and self …

Software analysis, debugging, and reverse engineering have a crucial impact in today's
software industry. Efficient and stealthy debuggers are especially relevant for malware …

As IoT devices are being widely used, malicious code is increasingly appearing in Linux
environments. Sophisticated Linux malware employs various evasive techniques to deter …

Kernel Address Sanitizer (KASAN), an invaluable tool for finding use-after-free and out-of-
bounds bugs in the Linux kernel, needs the kernel source for compile-time instrumentation …

Failure diagnosis in practical systems is difficult, and the main obstacle is that the
information a developer has access to is limited. This information is usually not enough to …

Many modern processors have embedded hardware tracing techniques (eg, Intel Processor
Trace or ARM CoreSight). While these techniques are widely used due to their transparency …

Existing anti-malware software and reverse engineering toolkits struggle with stealthy sub-
OS rootkits due to limitations of run-time kernel-level monitoring. A malicious kernel-level …