A VMware image containg our software for trace-based vulnerability analysis is now available for download. The image has been tested with VMware Workstation 6.5 and VMware Player 3.1 (the latter can be downloaded free of charge from VMware). It can also be converted for use with VirtualBox or QEMU. Uncompressed, the image requires about 5GB of disk space. It is based on Ubuntu 10.04; the default user account is "bh2010" with password "bh2010". It includes example traces from an Adobe Reader crash, plus binary versions of TEMU, Traecap, alloc_reader, tracealign, tracedump, trace_reader, valset_ir, x86_slicer, and supporting programs and scripts. See the README.TXT file inside the distribution for more information.
bh2010.tar.bz2 (1.5G)
We had previously also linked here to a demo of an IDA Pro "Taint Tracker" plugin for viewing taint traces, a BitBlaze-related tool made available in a free demo version by Ensighta Security. However because of business changes at Ensighta that tool is not currently available for download here.
taint_track_example.zip (49MB)
@InProceedings{SBYCJKLNPS2008,
author = {Dawn Song and David Brumley and Heng Yin and Juan Caballero and
Ivan Jager and Min Gyung Kang and Zhenkai Liang and James Newsome and
Pongsin Poosankam and Prateek Saxena},
title = {{BitBlaze}: A New Approach to Computer Security via Binary Analysis},
booktitle = {Proceedings of the 4th International Conference on Information Systems Security. Keynote invited paper.},
address = {Hyderabad, India},
year = 2008,
month = dec,
}
@Misc{BitBlazeWebSite,
key = {BitBlaze},
title = {{BitBlaze}: Binary Analysis for Computer Security},
note = {\url{http://bitblaze.cs.berkeley.edu/}}
}
Though we are not providing formal support for Vine at this time, we would like to hear if you are making use of it, if you run into any bugs or problems, or if you have suggestions for feature additions. Please subscribe to the bitblaze-users mailing list (via Google Groups) and share your experiences.
For general questions regarding the BitBlaze project, please send email to bitblaze at gmail.com.
To receive announcements about code releases and other bitblaze related updates, please subscribe to the Bitblaze Announcement List
Back to BitBlaze