SPIDER: Stealthy Binary Program Instrumentation and ...

← Back to document page

spider : Stealthy Binary Program Instrumentation andDebugging Via Hardware VirtualizationZhui Deng, Xiangyu Zhang and Dongyan XuDepartment of Computer Science and CERIAS, Purdue University, West Lafayette, IN 47907{deng14, xyzhang, ability to trap the execution of a Binary Program at de-sired instructions is essential in many security scenarios suchas malware analysis and attack provenance. However, an in-creasing percent of both malicious and legitimate programsare equipped with anti- debugging and anti-instrumentationtechniques, which render existing debuggers and instrumen-tation tools inadequate. In this paper, we presentSpi-der, a Stealthy Program Instrumentation framework whichenables transparent, efficient and flexible instruction-leveltrapping based on hardware in-visible breakpoint, a novel primitive we develop that inher-its the efficiency and flexibility of software breakpoint, andutilizes hardware virtualization to hide its side-effects fromthe guest.}

SPIDER: Stealthy Binary Program Instrumentation and Debugging Via Hardware Virtualization Zhui Deng, Xiangyu Zhang and Dongyan Xu Department of Computer Science and CERIAS, Purdue University, West Lafayette, IN 47907

  Programs, Instrumentation, Binary, Spider, Debugging, Stealthy binary program instrumentation, Stealthy, Stealthy binary program instrumentation and debugging