Leveraging program slicing to understand network traffic

This project centers around utilizing the concept of backward slice analysis of a binary to reconstruct the contents of a function call. To that end, a suite of modular tools will be developed to enable an analyst to glean relevant information about what data a binary is accessing and what it is doing with it. Each tool plays a small role in this overall goal while also being capable standing on its own. This functionality has utility in a variety of applications including detection of unauthorized gathering of personal information, malicious use of private functions, and unknown network protocol analysis. These use cases will be discussed in the paper.

Level thesis:degree_level

Masters

Department dc:contributor.department

Electrical and Computer Engineering

Grantor dc:publisher

Georgia Institute of Technology

Year dc:date.issued

2019

Author dc:creator

• Stewart, Allen Joel

Advisor dc:contributor.advisor

• Saltaformaggio, Brendan D.

Committee members dc:contributor.committeemember

• Beyah, Raheem A.
• Smith, William W.

• Angr
• Backward slice
• Program slice
• Binary analysis
• Reverse engineering
• Ida
• Ghidra
• Python

Language dc:language.iso

en_US

Handle dc:identifier.uri

http://hdl.handle.net/1853/62359

OAI identifier oai:identifier

oai:repository.gatech.edu:1853/62359