A VMware image containg our software for trace-based vulnerability analysis is now available for download. The image has been tested with VMware Workstation 6.5 and VMware Player 3.1 (the latter can be downloaded free of charge from VMware). It can also be converted for use with VirtualBox or QEMU. Uncompressed, the image requires about 5GB of disk space. It is based on Ubuntu 10.04; the default user account is "bh2010" with password "bh2010". It includes example traces from an Adobe Reader crash, plus binary versions of TEMU, Traecap, alloc_reader, tracealign, tracedump, trace_reader, valset_ir, x86_slicer, and supporting programs and scripts. See the README.TXT file inside the distribution for more information.
bh2010.tar.bz2 (1.5G)
An example execution trace and a pre-loaded IDA database for visual analysis is now available for download. A user can combine the information from the trace into the database by using Taint Tracker IDA plugin. Taint Tracker IDA plugin is a visualization tool for navigating the execution traces generated by BitBlaze Binary Analysis Platform. The tool is owned by Ensighta Security Inc., who provides a free demo version for non commercial use.
taint_track_example.zip (49MB)
taint_track.zip (66KB)
@InProceedings{SBYCJKLNPS2008,
author = {Dawn Song and David Brumley and Heng Yin and Juan Caballero and
Ivan Jager and Min Gyung Kang and Zhenkai Liang and James Newsome and
Pongsin Poosankam and Prateek Saxena},
title = {{BitBlaze}: A New Approach to Computer Security via Binary Analysis},
booktitle = {Proceedings of the 4th International Conference on Information Systems Security. Keynote invited paper.},
address = {Hyderabad, India},
year = 2008,
month = dec,
}
@Misc{BitBlazeWebSite,
key = {BitBlaze},
title = {{BitBlaze}: Binary Analysis for Computer Security},
note = {\url{http://bitblaze.cs.berkeley.edu/}}
}
Though we are not providing formal support for Vine at this time, we would like to hear if you are making use of it, if you run into any bugs or problems, or if you have suggestions for feature additions. Please subscribe to the bitblaze-users mailing list (via Google Groups) and share your experiences.
If you would prefer a more structured form of interaction, you can also submit questions and bug reports to our ticket-tracking database. Send your initial submissions by email to bitblazert at gmail.com and an account will be created automatically.
For general questions regarding the BitBlaze project, please send email to bitblaze at gmail.com.
To receive announcements about code releases and other bitblaze related updates, please subscribe to the Bitblaze Announcement List
Back to BitBlaze