This course on Contemporary Automatic Program Analysis aims to teach learners about the history, techniques, and current landscape of automatic program analysis for discovering vulnerabilities in code. The course covers topics such as vulnerability research, vulnerability discovery, metacharacter injection, command injection, buffer overflow, symbolic execution, and static analysis platforms. The teaching method includes practical code examples, demos, and online reference materials. This course is intended for individuals interested in cybersecurity, software development, and vulnerability research.
Overview
Syllabus
Introduction
Julian Cohen
Program Analysis
Vulnerability Research
Vulnerability Discovery
Presentation Goal
Metacharacter Injection
Command Injection
Type Confusion
Implicit Type Conversion Vulnerability
Implicit Type Conversion
Buffer Overflow
Rats
FAL Grind
BAL Grind
QuickSEC
After Free Vulnerability
Aurora Center
Aurora UAF
Symbolic Execution
Constraint Solving
Klee
CLE
CLE Demo
Symbolic Execution Engines
Static Analysis Platforms
Conclusion
Thanks
Questions
Taught by
Black Hat
