News

Seminar

Dynamic Instrumentation for Application Security and Analysis

Dr. Derek Bruening
VMware

Date: Wednesday, October 28th, 2009
Location CII (LOW) 3051, 4:00 p.m. to 5:00 p.m.

Abstract:

Modern applications, with dynamically-loaded modules and dynamically-generated code, are assembled at runtime. Consequently, the power and reach of static analysis tools are diminishing. In this talk, I will present DynamoRIO, a general framework for efficient, fine-grained, and comprehensive code observation and modification entirely at runtime. DynamoRIO is a flexible platform for creating dynamic tools in areas including program analysis, introspection, profiling, auditing, trace gathering, taint tracking, optimization, translation, and more. Tools built with DynamoRIO operate on unmodified application binaries on commodity hardware. I will discuss in detail several particular tools, including a system for providing strong security guarantees during program execution. Dubbed Program Shepherding, it turned into a successful, award-winning commercial security product.

Last updated: October 23, 2009