DDE: dynamic data structure excavation

  • Authors:
  • Asia Slowinska;Traian Stancescu;Herbert Bos

  • Affiliations:
  • Vrije Universiteit Amsterdam, Amsterdam, Netherlands;Vrije Universiteit Amsterdam, Amsterdam, Netherlands;Vrije Universiteit Amsterdam, Amsterdam, Netherlands

  • Venue:
  • Proceedings of the first ACM asia-pacific workshop on Workshop on systems
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

Dynamic Datastructure Excavation (DDE) is a new approach to extract datastructures from C binaries without any need for debugging symbols. Unlike most existing tools, DDE uses dynamic analysis (on a QEMU-based emulator) and detects data structures by tracking how a program uses memory. Its results are much more accurate than those of previous methods.