PMP: Cost-Effective Forced Execution with Probabilistic Memory Pre-Planning
937
Docker repository for "PMP: Cost-Effective Forced Execution with Probabilistic Memory Pre-Planning" (in IEEE S&P'20). Please refer to the paper for technical details.
docker pull izhuer/pmp:v0.0.1
1. Directory Structure
* /root/PMP (current version for malware execution, filling memory with zero values for stability)
|- /root/PMP/Dyninst: off-the-shelf binary analysis tool
|- /root/PMP/analysis: utility for binary analysis (e.g., cg/cfg, jmp table, indirect call)
|- /root/PMP/bak: template of input_scheme and memory_sheme
|- /root/PMP/hook: interception of critical libc functions
|- /root/PMP/qemu: main engine of PMP (all modifications can be found by searching "PMP Modification")
|- /root/PMP/work: work directory
* /root/ForceExecution (backup version for SPEC2000 evaluation)
(all modifications can be found by searching "ForceExecution Modification")
qemu/src-random: randomize memory value
qemu/src-determ: filling memory with zero values
qemu/src-xforce: simulation of x-force
qemu/src-ground: original qemu with extra statistics functions
2. Execution (demo)
cd /root/PMP
./pmp.sh test
@inproceedings{DBLP:conf/sp/You0KAPSHZ20,
author = {Wei You and
Zhuo Zhang and
Yonghwi Kwon and
Yousra Aafer and
Fei Peng and
Yu Shi and
Carson Harmon and
Xiangyu Zhang},
title = {{PMP:} Cost-effective Forced Execution with Probabilistic Memory Pre-planning},
booktitle = {2020 {IEEE} Symposium on Security and Privacy, {SP} 2020, San Francisco,
CA, USA, May 18-21, 2020},
pages = {1121--1138},
publisher = {{IEEE}},
year = {2020},
url = {https://doi.org/10.1109/SP40000.2020.00035},
doi = {10.1109/SP40000.2020.00035},
timestamp = {Tue, 25 Aug 2020 08:18:17 +0200},
biburl = {https://dblp.org/rec/conf/sp/You0KAPSHZ20.bib},
bibsource = {dblp computer science bibliography, https://dblp.org}
}
Content type
Image
Digest
Size
1.7 GB
Last updated
about 6 years ago
docker pull izhuer/pmp