| |
KRover: A Symbolic Execution Engine for Dynamic Kernel Analysis
Speaker (s):
Pansilu PITIGALA ARACHCHILLAGE
PhD Candidate,
School of Computing and Information Systems
Singapore Management University
|
|
Date:
Time:
Venue:
|
|
23 November 2023, Thursday
2:00pm – 2:15pm
Meeting Room 4.4, Level 4,
School of Computing and Information
Systems 1 (SCIS1),
80 Stamford Road, Singapore 178902
We look forward to seeing you at this research seminar.
Please register by 21 November 2023.
|
|
About the Talk
We present KRover, a novel kernel symbolic execution engine catered for dynamic kernel analysis such as vulnerability analysis and exploit generation. Different from existing symbolic execution engines, KRover operates directly upon a live kernel thread’s virtual memory and weaves symbolic execution into the target’s native executions. KRover is compact as it neither lifts the target binary to an intermediary representation nor uses QEMU or dynamic binary translation. Benchmarked against S2E, our performance experiments show that KRover is up to 50 times faster but with one tenth to one quarter of S2E memory cost. As shown in our four case studies, KRover is noise free, has the best possible binary intimacy and does not require prior kernel instrumentation. Moreover, a user can develop her kernel analyzer that not only uses KRover as a symbolic execution library but also preserves its independent capabilities of reading/writing/controlling the target runtime. Namely, the resulting analyzer on top of KRover integrates symbolic reasoning and conventional dynamic analysis and reaps the benefits of their reinforcement to each other.
This is a Pre-Conference talk for the ACM Conference on Computer and Communications Security (ACM CCS 2023).
About the Speaker
Pansilu Pitigala Arachchillage is a PhD candidate in Computer Science at Singapore Management University, supervised by Prof. Ding Xuhua. His research focuses on software and systems security. Pansilu holds a bachelor's degree in Electronic and Telecommunication Engineering and a master's degree in Computer Science, Security Engineering from the University of Moratuwa. Prior to his academic journey, he worked in the financial technology industry as a senior product owner at the London Stock Exchange Group.
|
