posts

» Paper notes: HeapHopper ^{_{06 Sep 2018}}

» Paper notes: Block oriented programming: automating data-only attacks ^{_{02 Aug 2018}}

» Paper notes: Reverse engineering x86 processor microcode ^{_{14 Sep 2017}}

» Paper notes: Telling your secrets without page faults ^{_{28 Aug 2017}}

» Paper notes: BinSim ^{_{21 Aug 2017}}

» Paper notes: ARTISTE ^{_{26 Apr 2016}}

» Paper notes: Towards automatic inference of kernel object semantics from binary code ^{_{20 Feb 2016}}

» Paper notes: Automating information flow analysis of low level code ^{_{04 Sep 2015}}

» Paper notes: Fuzzy stack hash ^{_{29 Dec 2014}}

» Paper notes: Enhancing symbolic execution with veritesting ^{_{23 Dec 2014}}

» Paper notes: Toward a foundational typed assembly language ^{_{19 Nov 2014}}

» Paper notes: Time-ordered event traces ^{_{18 Nov 2014}}

» Paper notes: Interprocedural program analysis ^{_{17 Nov 2014}}

» Paper notes: A first step towards automated detection of buffer overrun vulnerabilities ^{_{12 Nov 2014}}

» Paper notes: Undangle ^{_{11 Nov 2014}}

» Paper notes: Efficiently detecting all dangling pointer uses in production servers ^{_{10 Nov 2014}}

» Paper notes: Type-based memory allocator hardening notes ^{_{07 Nov 2014}}

» Paper notes: Memory leak detection based on memory state transition graph ^{_{06 Nov 2014}}

» Paper notes: Path and context sensitive inter-procedural memory leak detection ^{_{05 Nov 2014}}

» Paper notes: A memory model for static analysis of C programs ^{_{04 Nov 2014}}

» Paper notes: Static program analysis assisted dynamic taint tracking ^{_{03 Nov 2014}}

» Heap Exploitation Abstraction by Example - OWASP 2012 ^{_{17 Aug 2012}}

» Black Hat USA 2012: Owning Firefox's Heap ^{_{14 May 2012}}

» Pseudomonarchia jemallocum ^{_{16 Apr 2012}}

» The Linux kernel memory allocators from an exploitation perspective ^{_{03 Jan 2012}}

» May 2011 0day ^{_{24 May 2011}}

» Short Black Hat Europe 2011 review ^{_{21 Mar 2011}}

» Protecting the Core - Black Hat Europe 2011 ^{_{27 Feb 2011}}

» Advisory: FreeBSD kernel NFS client local vulnerabilities ^{_{23 May 2010}}

» FreeBSD kernel exploitation mitigations ^{_{26 Apr 2010}}

» Black Hat Europe 2010 ^{_{22 Apr 2010}}

» Quick kmdb cheatsheet ^{_{20 Feb 2010}}

» Exploit for CVE-2010-0453 ^{_{07 Feb 2010}}

» First 2010 0day ^{_{06 Jan 2010}}

» Xmas 2009 0day ^{_{24 Dec 2009}}

» Advisory: Monkey HTTPd improper input validation vulnerability ^{_{14 Dec 2009}}

» Advisory: CoreHTTP web server off-by-one buffer overflow vulnerability ^{_{02 Dec 2009}}

» Advisory: Linux kernel SUNRPC off-by-two buffer overflow ^{_{01 Dec 2009}}

» Flickr is the new Bugtraq ^{_{26 Aug 2009}}

» ld-linuxv.so.1 rootkit ^{_{21 Aug 2009}}

» CVE-2008-3531: FreeBSD kernel stack overflow exploit development ^{_{04 Jul 2009}}

» FreeBSD kernel debugging ^{_{02 Jul 2009}}

» Exploiting the FreeBSD kernel memory allocator ^{_{12 Jun 2009}}

» Kernel stack-smashing protection in FreeBSD-8.0-current-200811 ^{_{19 Nov 2008}}

» Privilege vs. permission ^{_{13 Nov 2008}}

» Linksys WRT54GL resurrection ^{_{20 Oct 2008}}

» Ελληνικός ιστός εμπιστοσύνης (ενημέρωση) ^{_{11 Sep 2008}}

» Διαγραμματική παράσταση του ελληνικού ιστού εμπιστοσύνης (ενημέρωση) ^{_{26 Aug 2008}}

» Διαγραμματική παράσταση του ελληνικού ιστού εμπιστοσύνης ^{_{11 May 2008}}

» Huskarl ^{_{15 Feb 2008}}

» Metakall ^{_{13 Aug 2007}}

» ACM SAC 2008 TRECK track ^{_{25 Jun 2007}}

» Google as a "trust authority" ^{_{20 Jun 2007}}

» Listening to research papers ^{_{04 Jun 2007}}

» The cost of authentication ^{_{23 May 2007}}

» Why I don't like network-layer security systems ^{_{05 May 2007}}

» irssi last.fm now playing script ^{_{28 Apr 2007}}

» netris hack ^{_{23 Apr 2007}}

» pykeynote ^{_{21 Apr 2007}}

» Vint Cerf's talk ^{_{05 Mar 2006}}

» DNS names as mobile phone numbers ^{_{22 Feb 2006}}

» Windows and Windows CE port of the Stanford IBE library ^{_{14 Feb 2006}}

» Not a new beginning ^{_{03 Feb 2006}}

» Datagram TLS and the Authorization eXchange Protocol (AXP) ^{_{30 Aug 2005}}

» RSA European Information Security Awards 2004 ^{_{27 Nov 2004}}

» Let's make email more secure, a simple suggestion ^{_{02 Sep 2004}}

» ECC-LIB port for Windows and Windows CE ^{_{07 Feb 2004}}