------------------------------------------------------------------------------------------------------ #HITB2012KUL (OCT 10-11) REGISTRATION NOW OPEN http://conference.hitb.org/hitbsecconf2012kul/ ------------------------------------------------------------------------------------------------------ Presentation Materials: http://conference.hitb.org/hitbsecconf2012ams/materials/ In this presentation, we will discuss The System of Automatic Searching for Vulnerabilities (SASV). We will show how to use SASV and how to find vulnerabilities in fully automatic mode. We will demonstrate automatic process of finding security bugs in the kernel drivers of the Windows Operating System and describe in depth the key mechanisms of SASV. The SASV framework was developed based on the integration of IDA Pro and BitBlaze. The key mechanism of SASV is to implement taint propagation algorithm. We will talk about some real life examples, and some advanced algorithms, like: static taint analysis. ABOUT ALEX BAZHANYUK I take part in the BitBlaze project: http://bitblaze.cs.berkeley.edu/ and work as a reverse engineering in CISS (Center of Innovative Security Solutions) http://cisscompany.com/ My responsibilities include development fuzzing R0 (syscall,ioctl), R3 (browsers, office suites, Flash) and binary analysis. You can follow me on Twitter @ABazhanyuk ABOUT NIKITA TARAKANOV Nikita has worked as a security researcher in Positive Technologies, Vupen Security and CISS. He is the author of some materials about kernel vulnerabilities and exploitation in kernel land and currently, does vulnerability research relating to the problem surrounding the automatic searching of vulnerabilities.

Source: https://www.youtube.com/watch?v=UOLKHl64jPc
Uploader: Hack In The Box Security Conference

plus-circle Add Review

comment

Reviews