CTF-All-In-One/doc/8_academic.md

第八章 学术篇

论文下载： 链接：https://pan.baidu.com/s/1G-WFCzAU2VdrrsHqJzjGpw 密码：vhfw

• Return-Oriented Programming
  • 8.1.1 The Geometry of Innocent Flesh on the Bone: Return-into-libc without Function Calls (on the x86)
  • 8.1.2 Return-Oriented Programming without Returns
  • 8.1.3 Return-Oriented Rootkits: Bypassing Kernel Code Integrity Protection Mechanisms
  • 8.1.4 ROPdefender: A Detection Tool to Defend Against Return-Oriented Programming Attacks
  • 8.1.5 Data-Oriented Programming: On the Expressiveness of Non-Control Data Attacks
  • 8.1.6 Hacking Blind
• Symbolic Execution
  • 8.2.1 All You Ever Wanted to Know About Dynamic Taint Analysis and Forward Symbolic Execution (but might have been afraid to ask)
  • 8.2.2 Symbolic Execution for Software Testing: Three Decades Later
  • 8.2.3 AEG: Automatic Exploit Generation
• Address Space Layout Randomization
  • 8.3.1 Address Space Layout Permutation (ASLP): Towards Fine-Grained Randomization of Commodity Software
• Code Obfuscation
• Reverse Engineering
  • 8.3 New Frontiers of Reverse Engineering
• Android Security
  • 8.4 EMULATOR vs REAL PHONE: Android Malware Detection Using Machine Learning
  • 8.5 DynaLog: An automated dynamic analysis framework for characterizing Android applications
  • 8.6 A Static Android Malware Detection Based on Actual Used Permissions Combination and API Calls
  • 8.7 MaMaDroid: Detecting Android malware by building Markov chains of behavioral models
  • 8.8 DroidNative: Semantic-Based Detection of Android Native Code Malware
  • 8.9 DroidAnalytics: A Signature Based Analytic System to Collect, Extract, Analyze and Associate Android Malware