2018-03-19 11:33:57 +07:00
# 第八章 学术篇
论文下载：
链接： ：
2018-04-29 21:21:55 +07:00
* [8.1 The Geometry of Innocent Flesh on the Bone: Return-into-libc without Function Calls (on the x86) ](8.1_ret2libc_without_func_calls.md )
* [8.2 Return-Oriented Programming without Returns ](8.2_rop_without_returns.md )
* [8.3 Return-Oriented Rootkits: Bypassing Kernel Code Integrity Protection Mechanisms ](8.3_rop_rootkits.md )
* [8.4 ROPdefender: A Detection Tool to Defend Against Return-Oriented Programming Attacks ](8.4_ropdefender.md )
* [8.5 Data-Oriented Programming: On the Expressiveness of Non-Control Data Attacks ](8.5_dop.md )
* [8.6 Hacking Blind ](8.6_brop.md )
* [8.7 What Cannot Be Read, Cannot Be Leveraged? Revisiting Assumptions of JIT-ROP Defenses ](8.7_jit-rop_defenses.md )
* [8.8 All You Ever Wanted to Know About Dynamic Taint Analysis and Forward Symbolic Execution (but might have been afraid to ask) ](8.8_dynamic_taint_analysis.md )
* [8.9 Symbolic Execution for Software Testing: Three Decades Later ](8.9_symbolic_execution.md )
* [8.10 AEG: Automatic Exploit Generation ](8.10_aeg.md )
* [8.11 Address Space Layout Permutation (ASLP): Towards Fine-Grained Randomization of Commodity Software ](8.11_aslp.md )
* [8.12 ASLR on the Line: Practical Cache Attacks on the MMU ](8.12_aslr_on_the_line.md )
* [8.13 New Frontiers of Reverse Engineering ](8.13_reverse_engineering.md )
* [8.14 Who Allocated My Memory? Detecting Custom Memory Allocators in C Binaries ](8.14_detecting_memory_allocators.md )
* [8.15 EMULATOR vs REAL PHONE: Android Malware Detection Using Machine Learning ](8.15_emulator_vs_real_phone.md )
* [8.16 DynaLog: An automated dynamic analysis framework for characterizing Android applications ](8.16_dynalog.md )
* [8.17 A Static Android Malware Detection Based on Actual Used Permissions Combination and API Calls ](8.17_actual_used_permissions.md )
* [8.18 MaMaDroid: Detecting Android malware by building Markov chains of behavioral models ](8.18_malware_markov_chains.md )
* [8.19 DroidNative: Semantic-Based Detection of Android Native Code Malware ](8.19_droidnative.md )
* [8.20 DroidAnalytics: A Signature Based Analytic System to Collect, Extract, Analyze and Associate Android Malware ](8.20_droidanalytics.md )
* [8.21 Micro-Virtualization Memory Tracing to Detect and Prevent Spraying Attacks ](8.21_tracing_to_detect_spraying.md )
* [8.22 Practical Memory Checking With Dr. Memory ](8.22_memory_checking.md )
* [8.23 Evaluating the Effectiveness of Current Anti-ROP Defenses ](8.23_current_anti-rop.md )
* [8.24 How to Make ASLR Win the Clone Wars: Runtime Re-Randomization ](8.24_runtime_re-randomization.md )
2018-05-29 20:51:00 +07:00
* [8.25 (State of) The Art of War: Offensive Techniques in Binary Analysis ](8.25_offsensive_techniques.md )
2018-06-02 13:52:30 +07:00
* [8.26 Driller: Augmenting Fuzzing Through Selective Symbolic Execution ](8.26_driller_fuzzing.md )
* [8.27 Firmalice - Automatic Detection of Authentication Bypass Vulnerabilities in Binary Firmware ](8.27_firmalice_bypass.md )
* [8.28 Cross-Architecture Bug Search in Binary Executables ](8.28_cross_arch_bug_search.md )
* [8.29 Dynamic Hooks: Hiding Control Flow Changes within Non-Control Data ](8.29_dynamic_hooks.md )
