Questions tagged [dynamic-analysis]

Dynamic analysis extracts information about programs by executing them on a real or virtual processor.

Dynamic analysis is a method for extracting information about programs or the data they process, by collecting critical data during program execution. This can overcome the problem of a static analysis, which is often too conservative ("some event E might occur"), by providing evidence that some specific events (e.g., E) did occur.

A first issue is deciding what information to collect.

A difficult issue is how to insert data-collecting probes into the runtime code:

  • hide the instrumentation in runtime libraries or OS used by the program
  • patch the object code
  • trap code pages of interest and simulate the critical part
  • simulate the entire program execution and collect data as needed
  • modify the source code to insert the instrumentation

Another issue is whether the data collection process interferes with program execution; this is especially important for programs with real time constraints.

64 questions
1
vote
0 answers

Can Kibana reports be designed similarly to Sentry Error Logging?

Can the reporting functionality in Kibana be used to design reports that works similarly to how Sentry provides reports to developers? I do believe that some more things need to be in place. For instance full stack trace need to be added in the log…
Independent
  • 2,924
  • 7
  • 29
  • 45
1
vote
1 answer

Can JVM bytecode running on the GraalVM be instrumented by a custom `TruffleInstrument`?

I would like to write a Truffle instrument which can instrument Java programs (or at least JVM bytecode programs) when they are run on GraalVM. I have been investigating different ways to perform fine-grained instrumentation of Java programs to…
1
vote
1 answer

When the crosshair command succeeds, has my contract been proven correct?

When crosshair finds no counterexamples, has it used the Z3 solver to prove that my contract holds? The docs indicate that the absence of a counterexample doesn't guarantee that the property holds, but is that just because the translation or…
pschanely
  • 144
  • 1
  • 8
1
vote
1 answer

Can I do binary taint analysis?

I want to analyze the following binary. 4005e0: 55 push %rbp 4005e1: 48 89 e5 mov %rsp,%rbp 4005e4: 48 83 ec 10 sub $0x10,%rsp 4005e8: c7 45 fc 09 00 00 00 movl $0x9,-0x4(%rbp) 4005ef:…
usagi
  • 13
  • 3
1
vote
1 answer

Is it possible to get index of the next item from iterator?

Consider the following program, from the title which should be self explanatory . I need to implement the function next_index(it) that returns the index of next item an iterator is about to return. def next_index(it): #do something here …
Mr. Nobody
  • 185
  • 11
1
vote
0 answers

Program Analysis - Join over path vs Meet over path

MOP and JOP are commonly used concepts in program analysis. As far I know, MOP goes up the lattice and JOP goes down. However, I still need a solid definition + explanation (and applications) of both. Any answer would be appreciated.
mikasa
  • 783
  • 1
  • 11
  • 29
1
vote
1 answer

Getting the stack pointer content using Intel's PinTool

Using objdump utility, we are able to retrieved the relative address of a variable for example consider a simple C program: Source-code: #include void do_stuff(int my_arg){ int my_local=my_arg+2; int i; for(i=0;i
Bernard Nongpoh
  • 1,028
  • 11
  • 20
1
vote
1 answer

Pin: instrument a specified shared library

I am performing some simple instrumentation task on an executable file and its related shared libraries, recording all the executed instructions in the main file as well as the shared libraries. However, Pin always throw Pin is out of memory:…
lllllllllllll
  • 8,519
  • 9
  • 45
  • 80
1
vote
1 answer

Resume execution at arbitrary positions inside a callback function

I am using Pin for dynamic analysis. In my dynamic analysis task on 64-bit x86 binary code, I would like to resume the execution at arbitrary program positions (e.g., the second instruction of current executed function) after I fix certain memory…
lllllllllllll
  • 8,519
  • 9
  • 45
  • 80
1
vote
1 answer

Is it possible to probe the entry in a C++ class using Dtrace?

I would like to see when the program enters in a class using Dtrace. For instance: dtrace -c './myProgram' -n 'pid$target:myProgram:function:entry' it fires when the program myProgram enters in the function function, now how can I write a probe…
Alessandro
  • 266
  • 1
  • 2
  • 13
1
vote
0 answers

What is the difference between static code analysis and dynamic analysis?

I just wanted to know what the difference is between static program analysis and dynamic analysis. How are each of these two done?
user3011084
  • 133
  • 6
1
vote
1 answer

type of security testing in web based application

looking for Type of Security testing are dynamic and static analysis part of security testing? as QA tester do we need to know programming or coding language knowledge to perform security testing? at what phase of STLC or SDLC we can perform…
binitsql
  • 67
  • 2
  • 10
1
vote
1 answer

Resources on variable type prediction for Javascript?

Quoting from this academic paper: Syntactic and Semantic Prediction in Dynamic Languages: IntelliSense is practically based on the knowledge of variables type. Hence the symbols describing variables have to contain their type if it's known…
Eduard Florinescu
  • 16,747
  • 28
  • 113
  • 179
1
vote
1 answer

Dynamic analysis - CLR profiler?

I am kinda new to this and would need to confirm, MS CLR Profiler, is it a dynamic analysis tool? Will it be able to find some memory leaks or for this I would need more sophisticated tool?
John V
  • 4,855
  • 15
  • 39
  • 63
0
votes
0 answers

Is there a way to instrument multi-dex Android apk for code coverage?

Good afternoon, I could use some help. I am looking for a tool that allows to automatically instrument a multi-dex Android application, so to generate code coverage reports at the end of dynamic analysis. At the moment I have tested two tools namely…