Harnessing the Power of LLM to Support Binary Taint Analysis

DICE: Automatic emulation of dma input channels for dynamic firmware analysis. In 2021 IEEE Symposium on Security and Privacy (SP) . IEEE, 1938–1954

Alejandro Mera, Bo Feng, Long Lu, and Engin Kirda. 2021 · 1954

Earlier work this paper cites.

Ewd 1308: What led to “notes on structured programming”

Edsger W Dijkstra. 2002 · 2002

Earlier work this paper cites.

Loco: An interactive code (de) obfuscation tool. In Proceedings of the 2006 ACM SIGPLAN symposium on Partial evaluation and semantics-based program manipulation . 140–144

Matias Madou, Ludo Van Put, and Koen De Bosschere. 2006 · 2006

Earlier work this paper cites.

Software security

Gary McGraw. 2006 · 2006

Earlier work this paper cites.

Merlin: specification inference for explicit information flow problems

Benjamin Livshits, Aditya V. Nori, Sriram K. Rajamani, and Anindya Banerjee. 2009 · 2009

Earlier work this paper cites.

TAJ: effective taint analysis of web applications

Omer Tripp, Marco Pistoia, Stephen J. Fink, Manu Sridharan, and Omri Weisman. 2009 · 2009

Earlier work this paper cites.

Stuxnet: Dissecting a Cyberwarfare Weapon

R. Langner. 2011 · 2011

Earlier work this paper cites.

Androidleaks: Automatically detecting potential privacy leaks in android applications on a large scale. In Trust and Trustworthy Computing: 5th International Conference, TRUST 2012, Vienna, Austria, June 13-15, 2012. Proceedings 5 . Springer, 291–307

Clint Gibler, Jonathan Crussell, Jeremy Erickson, and Hao Chen. 2012 · 2012

Earlier work this paper cites.

ScanDal: Static analyzer for detecting privacy leaks in android applications

Jinyung Kim, Yongho Yoon, Kwangkeun Yi, Junbum Shin, and SWRD Center. 2012 · 2012

Earlier work this paper cites.

IntFlow: improving the accuracy of arithmetic error detection using information flow tracking. In Proceedings of the 30th Annual Computer Security Applications Conference (New Orleans, Louisiana, USA) (ACSAC ’14) . Association for Computing Machinery, New York, NY, USA, 416–425

Marios Pomonis, Theofilos Petsios, Kangkook Jee, Michalis Polychronakis, and Angelos D. Keromytis. 2014 · 2014

Earlier work this paper cites.

Information flow analysis of android applications in droidsafe.. In NDSS , Vol. 15. 110

Michael I Gordon, Deokhwan Kim, Jeff H Perkins, Limei Gilham, Nguyen Nguyen, and Martin C Rinard. 2015 · 2015

Earlier work this paper cites.

Joza: Hybrid taint inference for defeating web application sql injection attacks. In 2015 45th Annual IEEE/IFIP International Conference on Dependable Systems and Networks . IEEE, 172–183

Abbas Naderi-Afooshteh, Anh Nguyen-Tuong, Mandana Bagheri-Marzijarani, Jason D Hiser, and Jack W Davidson. 2015 · 2015

Earlier work this paper cites.

Cross-architecture bug search in binary executables. In 2015 IEEE Symposium on Security and Privacy . IEEE, 709–724

Jannik Pewny, Behrad Garmany, Robert Gawlik, Christian Rossow, and Thorsten Holz. 2015 · 2015

Earlier work this paper cites.

Under-Constrained Symbolic Execution: Correctness Checking for Real Code. In 24th USENIX Security Symposium (USENIX Security 15) . USENIX Association, Washington, D.C., 49–64

David A. Ramos and Dawson Engler. 2015 · 2015

Earlier work this paper cites.

Automatic inference of search patterns for taint-style vulnerabilities. In 2015 IEEE Symposium on Security and Privacy . IEEE, 797–812

Fabian Yamaguchi, Alwin Maier, Hugo Gascon, and Konrad Rieck. 2015 · 2015

Earlier work this paper cites.

Binary code is not easy. In Proceedings of the 25th International Symposium on Software Testing and Analysis . 24–35

Xiaozhu Meng and Barton P Miller. 2016 · 2016

Earlier work this paper cites.

SOK: (State of) The Art of War: Offensive Techniques in Binary Analysis. In 2016 IEEE Symposium on Security and Privacy (SP) . 138–157

Yan Shoshitaishvili, Ruoyu Wang, Christopher Salls, Nick Stephens, Mario Polino, Andrew Dutcher, John Grosen, Siji Feng, Christophe Hauser, Christopher Kruegel, and Giovanni Vigna. 2016 · 2016

Earlier work this paper cites.

Driller: Augmenting fuzzing through selective symbolic execution.. In NDSS , Vol. 16. 1–16

Nick Stephens, John Grosen, Christopher Salls, Andrew Dutcher, Ruoyu Wang, Jacopo Corbetta, Yan Shoshitaishvili, Christopher Kruegel, and Giovanni Vigna. 2016 · 2016

Earlier work this paper cites.

Understanding the mirai botnet. In 26th USENIX security symposium . 1093–1110

Manos Antonakakis, Tim April, Michael Bailey, Matt Bernhard, Elie Bursztein, Jaime Cochran, Zakir Durumeric, J Alex Halderman, Luca Invernizzi, and Michalis Kallitsis. 2017 · 2017

Earlier work this paper cites.

Function interface analysis: A principled approach for function recognition in COTS binaries. In 2017 47th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN) . IEEE, 201–212

Rui Qiao and R Sekar. 2017 · 2017

Earlier work this paper cites.

BootStomp: On the security of bootloaders in mobile devices. In 26th USENIX Security Symposium (USENIX Security 17) . 781–798

Nilo Redini, Aravind Machiry, Dipanjan Das, Yanick Fratantonio, Antonio Bianchi, Eric Gustafson, Yan Shoshitaishvili, Christopher Kruegel, and Giovanni Vigna. 2017 · 2017

Earlier work this paper cites.

Security slicing for auditing common injection vulnerabilities

Julian Thomé, Lwin Khin Shar, Domenico Bianculli, and Lionel Briand. 2018 · 2017

Earlier work this paper cites.

IoTFuzzer: Discovering Memory Corruptions in IoT Through App-based Fuzzing.. In NDSS

Jiongyi Chen, Wenrui Diao, Qingchuan Zhao, Chaoshun Zuo, Zhiqiang Lin, XiaoFeng Wang, Wing Cheong Lau, Menghan Sun, Ronghai Yang, and Kehuan Zhang. 2018 · 2018

Earlier work this paper cites.

DTaint: detecting the taint-style vulnerability in embedded device firmware. In 2018 48th Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN) . IEEE, 430–441

Kai Cheng, Qiang Li, Lei Wang, Qian Chen, Yaowen Zheng, Limin Sun, and Zhenkai Liang. 2018 · 2018

Earlier work this paper cites.

Saluki: finding taint-style vulnerabilities with static property checking. In Proceedings of the NDSS Workshop on Binary Analysis Research , Vol. 2018

Ivan Gotovchits, Rijnard Van Tonder, and David Brumley. 2018 · 2018

Earlier work this paper cites.

QSYM: A practical concolic execution engine tailored for hybrid fuzzing. In 27th USENIX Security Symposium (USENIX Security 18) . 745–761

Insu Yun, Sangho Lee, Meng Xu, Yeongjin Jang, and Taesoo Kim. 2018 · 2018

Earlier work this paper cites.

Saturn-software deobfuscation framework based on llvm. In Proceedings of the 3rd ACM Workshop on Software Protection . 27–38

Peter Garba and Matteo Favaro. 2019 · 2019

Earlier work this paper cites.

Defeating opaque predicates statically through machine learning and binary analysis. In Proceedings of the 3rd ACM Workshop on Software Protection . 3–14

Ramtine Tofighi-Shirazi, Irina-Mariuca Asavoae, Philippe Elbaz-Vincent, and Thanh-Ha Le. 2019 · 2019

Earlier work this paper cites.

Breaking mobile firmware encryption through near-field side-channel analysis. In Proceedings of the 3rd ACM Workshop on Attacks and Solutions in Hardware Security Workshop . 23–32

Aurélien Vasselle, Philippe Maurine, and Maxime Cozzi. 2019 · 2019

Earlier work this paper cites.

FIRM-AFL:High-Throughput greybox fuzzing of IoT firmware via augmented process emulation. In 28th USENIX Security Symposium (USENIX Security 19) . 1099–1114

Original

Yaowen Zheng, Ali Davanian, Heng Yin, Chengyu Song, Hongsong Zhu, and Limin Sun. 2019 · 2019

Earlier work this paper cites.

DECAF: Automatic, Adaptive De-bloating and Hardening of COTS Firmware. In 29th USENIX Security Symposium (USENIX Security 20) . USENIX Association, 1713–1730

Jake Christensen, Ionut Mugurel Anghel, Rob Taglang, Mihai Chiroiu, and Radu Sion. 2020 · 2020

Earlier work this paper cites.

HALucinator: Firmware re-hosting through abstraction layer emulation. In 29th USENIX Security Symposium (USENIX Security 20) . 1201–1218

Abraham A Clements, Eric Gustafson, Tobias Scharnowski, Paul Grosen, David Fritz, Christopher Kruegel, Giovanni Vigna, Saurabh Bagchi, and Mathias Payer. 2020 · 2020

Cited alongside, same era.

P2IM: Scalable and hardware-independent firmware testing via automatic peripheral interface modeling. In 29th USENIX Security Symposium (USENIX Security 20) . 1237–1254

Bo Feng, Alejandro Mera, and Long Lu. 2020 · 2020

Cited alongside, same era.

Firmae: Towards large-scale emulation of iot firmware for dynamic analysis. In Annual computer security applications conference . 733–745

Mingeun Kim, Dongkwan Kim, Eunsoo Kim, Suryeon Kim, Yeongjin Jang, and Yongdae Kim. 2020 · 2020

Cited alongside, same era.

Symbolic execution with SymCC: Don’t interpret, compile!. In 29th USENIX Security Symposium (USENIX Security 20) . 181–198

Sebastian Poeplau and Aurélien Francillon. 2020 · 2020

Cited alongside, same era.

Large language models for code: Security hardening and adversarial testing. In Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security . 1865–1879

Jingxuan He and Martin Vechev. 2023 · 2023

Closest in time.

Large language models are few-shot testers: Exploring llm-based general bug reproduction. In 2023 IEEE/ACM 45th International Conference on Software Engineering (ICSE) . IEEE, 2312–2323

Sungmin Kang, Juyeon Yoon, and Shin Yoo. 2023 · 2023

Closest in time.

CODAMOSA: Escaping coverage plateaus in test generation with pre-trained large language models. In International conference on software engineering (ICSE)

Caroline Lemieux, Jeevana Priya Inala, Shuvendu K Lahiri, and Siddhartha Sen. 2023 · 2023

Closest in time.

Assisting static analysis with large language models: A chatgpt experiment. In Proceedings of the 31st ACM Joint European Software Engineering Conference and Symposium on the Foundations of Software Engineering . 2107–2111

Haonan Li, Yu Hao, Yizhuo Zhai, and Zhiyun Qian. 2023 · 2023

Closest in time.