Blogs (61) >>
Thu 19 Jul 2018 17:52 - 18:30 at Paris - SALAD 3 Chair(s): Jan Vitek

Compile-time specialization and feature pruning through static binary rewriting have been proposed repeatedly as techniques for reducing the attack surface of large programs, and for minimizing the trusted computing base. We propose a new approach to attack surface reduction: dynamic binary lifting and recompilation.

We present BinRec, a binary recompilation framework that lifts binaries to a compiler-level intermediate representation (IR) to allow complex transformations on the captured code. After transformation, BinRec lowers the IR back to a “recovered” binary, which is semantically equivalent to the input binary, but does have its unnecessary features removed. Unlike existing approaches, which are mostly based on static analysis and rewriting, our framework analyzes and lifts binaries dynamically. The crucial advantage is that we can not only observe the full program including all of its dependencies, but we can also determine which program features the end-user actually uses. We evaluate the correctness and performance of BinRec, and show that our approach enables aggressive pruning of unwanted features in COTS binaries.

Thu 19 Jul
Times are displayed in time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change

16:00 - 18:30: SALAD 3SALAD at Paris
Chair(s): Jan VitekNortheastern University
16:00 - 16:37
On the Effectiveness of Kernel Debloating via Compile-time Configuration
Mansour Alharthi, Hong HuGeorgia Institute of Technology, Hyungon MoonGeorgia Tech, Taesoo KimGeorgia Tech
16:37 - 17:15
WALA Everywhere: Cross Language Deep Analysis and Cross IDE Tool Support
Julian DolbyIBM Thomas J. Watson Research Center
17:15 - 17:52
Detection of Spectre vulnerabilities via static analysis
Omer TrippGoogle Inc.
17:52 - 18:30
BinRec: Attack Surface Reduction Through Dynamic Binary Recovery
Taddeus KroesVrije Universiteit Amsterdam, Anil Altinay, Joseph Nash, Yeoul Na, Stijn VolckaertUniversity of California, Irvine, Herbert Bos, Michael FranzUniversity of California, Irvine, Cristiano Giuffrida