Home > Research

Research

For my Ph.D. dissertation, I worked on static analysis tools for programs without source code, with emphasis on security aspects like detecting buffer overruns in binaries, understanding possibly malicious programs (web-plugins, viruses, trojans, ...). Specifically, I developed techniques to obtain an intermediate representation(IR) similar to the IR of a compiler's backend for a given x86 binary executable. These techniques have been implemented as part of CodeSurfer/x86, a prototype tool for browsing ("surfing"), inspecting, and analyzing x86 executables. As a case study, I used CodeSurfer/x86 to find bugs in Windows device drivers.

Thesis
Papers
Invited Papers
Reprinted In Collections
  • Reps, T., Balakrishnan, G., Lim, J., and Teitelbaum, T., Next-Generation Platform for Analyzing Executables. In Proc. of the ARO-DHS Malware Detection Workshop, (Arlington, VA, Aug 10-11, 2005), Advances in Information Security series, Springer-Verlag.

    (Reprinted from Proc. 3rd Asian Symposium on Programming Languages and Systems, Tsukuba, Japan, Nov. 3-5, 2005).

Other publications and Reports
  • Balakrishnan, G., Reps, T., Kidd, N., Lal, A., Lim, J., Melski, D., Gruian, R., Yong, S., Chen, C.-H., and Teitelbaum, T., Model checking x86 executables with CodeSurfer/x86 and WPDS++. In Proc. Workshop on the Evaluation of Software Defect Detection Tools, June 2005. [Co-located with PLDI05.]

ACM mandated notice: The documents distributed by this server have been provided by the contributing author(s) as a means to ensure timely dissemination of scholarly and technical work on a non-commercial basis. Copyright and all rights therein are maintained by the authors or by other copyright holders, notwithstanding that they have offered their works here electronically. It is understood that all persons copying this information will adhere to the terms and constraints invoked by each author's copyright. These works may not be reposted without the explicit permission of the copyright holder.