ExploitSpotting: Locating Vulnerabilities Out of Vendor Patches
Jeongwook Oh - ExploitSpotting: Locating Vulnerabilities Out of Vendor Patches Automatically This is a new methods to expedite the speed of binary diffing process.
Summary
Architecture and Background
Jeongwook Oh - ExploitSpotting: Locating Vulnerabilities Out of Vendor Patches Automatically This is a new methods to expedite the speed of binary diffing process. Most of the time in analyzing security patches are spent in finding the patched parts of the binary. In some cases one patch contains multiple patches and feature updates.
Vulnerability Analysis
The mixed patches will make the analysis very difficult and time consuming. That's where our new security patch recognizing technology kicks in. We're presenting general signature based security patch recognition and also a method combined with static taint analysis.
Exploitation and Demonstrations
With both methods implemented, we are presenting new DarunGrim 3 in this year's Defcon. It'll be a must have tool for the security researchers who's looking for the free 1-day exploits. Jeongwook Oh started his career as a firewall developer back in mid 90s.
Remediation and Defensive Strategies
After that he spent few years doing security audits and penetration testing. Finally, he moved to California and joined eEye crew and did some IPS stuff. It involved userland and kernel land hacking stuff. Now he's working for WebSense Inc where he's doing research related to malware and exploit detection. For copies of the slides and additional materials please see the DEF CON 18 Archive here:
Related talks
Main Stage·49 min
Jon McCoy
Jon McCoy explores hacking .net applications: the black arts at DEF CON 19, examining malware-analysis and practical defenses.
Main Stage·43 min
Chaos Computer Club
Chaos Computer Club explores chaosvpn for playing ctfs at DEF CON 18, examining malware-analysis and practical defenses.
Main Stage·49 min
Lineberry · Richardson · and Wyatt
Lineberry and Richardson details anthony Lineberry, David Luke Richardson & Tim Wyatt - These Aren't the Permissions You're Looking For The rise of the robot revolution is among us.