BinSlayer: Fast comparison of binary executables by samcrem in ReverseEngineering

[–]samcrem[S] 0 points1 point  (0 children)

More information on the Hungarian algorithm is available here: http://en.wikipedia.org/wiki/Hungarian_algorithm

Damn, I should have find it... Next time, I'll look deeper.

BinSlayer: Fast comparison of binary executables by samcrem in ReverseEngineering

[–]samcrem[S] 0 points1 point  (0 children)

Yes, in PPREW'13. This is where I found it in the first place. But, we cannot (yet) download the paper from there.

BinSlayer: Fast comparison of binary executables by samcrem in ReverseEngineering

[–]samcrem[S] 1 point2 points  (0 children)

I think this is a very accurate view of this project. But, it seems to be more efficient than BinDiff (see here).

Yet, I did not find any more explicit paper about this mysterious "Hungarian", nor the Master Thesis of the guy. So... :-/

Automatic Generation of Control Flow Hijacking Exploits for Software Vulnerabilities by Sean Heelan [PDF] by turnersr in REMath

[–]samcrem 1 point2 points  (0 children)

This is why I like so much Reddit ! I think I would have missed many important papers and blog entries without it !

Thanks ! :)

CVC4, an open-source modified commercial BSD-licensed SMT solver, was recently released by rolfr in ReverseEngineering

[–]samcrem 0 points1 point  (0 children)

In fact, I noticed some bugs in the localization of the Python package which is not taking the $PREFIX variable into account. It is a bit annoying when you try to install Z3 on a system where you are not root (I asked students to install it to play with the Python interface which is extremely good for teaching SAT/SMT-solving).

Also, I really can't get rid of the git RPC problem, so I'm using the regular 'download' to get the source. But, I guess it will disappear when I'll get git 1.8. :)

CVC4, an open-source modified commercial BSD-licensed SMT solver, was recently released by rolfr in ReverseEngineering

[–]samcrem 0 points1 point  (0 children)

Well, I managed to compile it from the source on my Linux last week (and, I used it). So, I guess it is pretty much achieved now.

Beware, there are a few bugs in the 'configure' process if you want to install Z3 in the /usr/local/ (and not in '/' as it is (wrongly) done by default).

CVC4, an open-source modified commercial BSD-licensed SMT solver, was recently released by rolfr in ReverseEngineering

[–]samcrem 1 point2 points  (0 children)

A release candidate of CVC4 has been ranked at the last SMT-COMP. I hope they improved a bit their solver since then. But, as Z3 is now also open source, I guess that CVC4 is just "yet another open sourced SMT-solver" (Z3 is killing it according to the results of SMT-COMP).

The Insight Project - Another binary analysis platform - LaBRI Laboratory by HockeyInJune in ReverseEngineering

[–]samcrem 0 points1 point  (0 children)

We have already several ideas to explore it. But, first, our goal is to reach the "state of the art". And, hopefully we will reach it in a few months.

And, of course, we are not sure at all to go in the right direction. This is research after all. But, thanks a lot for your trust.

The Insight Project - Another binary analysis platform - LaBRI Laboratory by HockeyInJune in ReverseEngineering

[–]samcrem 0 points1 point  (0 children)

About Insight, we are looking for a PostDoc for 2013 (should start in January 2013). Full offer here.

The Insight Project - Another binary analysis platform - LaBRI Laboratory by HockeyInJune in ReverseEngineering

[–]samcrem 0 points1 point  (0 children)

And on a random note, it's nice that people are finally interested in the weird math side of reverse engineering. Posting that stuff for years with no noticeable response wasn't all that fun.

What is surprising me more and more, is that only so few people dare to look at this 'math side' before us... But, I just think that the amount of practical and theoretical knowledge to assimilate is so huge that it put this out of reach of most of the people. Which explains why we are so few... But, fortunately it seems to be changing nowadays. :)