www.icact.org

Member Login

TACT Journal Homepage

Author Homepage

Call for Paper

Paper Procedure

Paper Submission/Update

Invoice/Registration

CRF Submission/Update

Find My Paper

Statistics & History

Welcome Message

Committee

FAQ

Paper Archives

Outstanding Papers

Program & Proceedings

Presentation Platform

Hotel & Travel Info

Photo Gallery

Scheduler Login

Seminar

Archives Login

Sponsors

Virual Oral Question and Answer


IEEE/ICACT20210212 Question.4 Questioner: James_Lan@htx.gov.sg 2021-02-09 오후 4:13:23	IEEE/ICACT20210212 Answer.4 Answer by Auhor hjcho1@korea.ac.kr 2021-02-09 오후 4:13:23
Hi, thanks for the sharing. What are your views for the applicable of the paper to binary reversing? That is, without source code. When reversing the binary, if static analysis generated integer overflow then there could a attacking vector to the binary? Thanks	Thank you for your question. My personal opinion is that weaknesses in development can lead to vulnerabilities after software release. When performing binary reversing, you can refer to the alarm generated by the static analysis tool to find the attack vector and cause an integer overflow through injection. For example, the vulnerable memcpy function in the C language could be a static analysis alarm.

Select Voice