Binary Analysis Tool Software Security Summer School
Explore CBAT, a Comparative Binary Analysis Tool developed for Software Security in the Summer School of August 2020. Learn about its motivation, key ideas, user studies, and more. CBAT aims to prove the relative correctness of programs and discover differences through comparative analysis. Find out how CBAT leverages differential program analysis and Weakest Precondition Analysis for bug-finding and verification. Discover more about this open-source tool's availability and how it can benefit your security analysis needs.
Download Presentation
Please find below an Image/Link to download the presentation.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author. If you encounter any issues during the download, it is possible that the publisher has removed the file from their server.
You are allowed to download the files provided on this website for personal or commercial use, subject to the condition that they are used lawfully. All files are the property of their respective owners.
The content on the website is provided AS IS for your information and personal use only. It may not be sold, licensed, or shared on other websites without obtaining consent from the author.
E N D
Presentation Transcript
CBAT: A Comparative Binary Analysis Tool Software Security Summer School August 2020
Motivation CBAT proves relative correctness of two programs or provides program inputs that demonstrate differences. 5
Key Idea 1: Binary Analysis Toolkits Several open-source binary analysis toolkits are available. Most resulted from the DARPA Cyber Grand Challenge. Provide a starting point for new binary analysis tooling: Decompilation from many binary formats to a platform-independent intermediate representation (IR). Analysis frameworks for IR programs. Draper evaluated two major toolkits (Angr and BAP). 6
BAP/Angr User Study High-level comparison of the two tools. Published in NASA Formal Methods 2019 Based on this study, we selected BAP as the primary platform for CBAT. More flexible. Slightly more performant. Better supported and documented. 7
Key Idea 2: Differential Program Analysis Late-stage customization provides an opportunity for formal verification: The original program can establish base truth about intended behavior. CBAT builds on research in this space, called differential program analysis. We extend and mature it. We bring it to binary (previously mostly for source code) Idea: generate relative verification conditions that may be easier to check. 8
Weakest Precondition (WP) Analysis Single program analysis Testing Verification Bug-finding Comparative analysis Relative correctness proofs Difference discovery 9
Availability CBAT is free, open-source software: https://github.com/draperlaboratory/cbat_tools MIT license makes reuse easy. Thanks to ONR for supporting development and allowing us to release it. Questions or comments after tutorial? Please reach out: Chris Casinghino ccasinghino@draper.com 11
