Questions tagged [dynamic-analysis]

Dynamic analysis extracts information about programs by executing them on a real or virtual processor.

Dynamic analysis is a method for extracting information about programs or the data they process, by collecting critical data during program execution. This can overcome the problem of a static analysis, which is often too conservative ("some event E might occur"), by providing evidence that some specific events (e.g., E) did occur.

A first issue is deciding what information to collect.

A difficult issue is how to insert data-collecting probes into the runtime code:

  • hide the instrumentation in runtime libraries or OS used by the program
  • patch the object code
  • trap code pages of interest and simulate the critical part
  • simulate the entire program execution and collect data as needed
  • modify the source code to insert the instrumentation

Another issue is whether the data collection process interferes with program execution; this is especially important for programs with real time constraints.

64 questions
0
votes
1 answer

Why dynamic analysis can not cover all the execution path of a program?

I am new in program analysis area and after reading some materials in this area, I have some questions which I can not find the corresponding answers.. See, if I implement a tool : symbolic execution + concrete execution just like DART then I think…
lllllllllllll
  • 8,519
  • 9
  • 45
  • 80
0
votes
1 answer

How to find addresses that a program used?

I want to find memory addresses that a exe file uses. I have the exe file and I want to have a list of addresses that it uses. This must be done statically and without running the executable itself. Can anybody help me please? Also, if you know a…
Iman Kianrostami
  • 482
  • 3
  • 13
-1
votes
3 answers

What is the difference between static analysis and dynamic analysis?

What is the difference between static analysis and dynamic analysis in terms of cyber security?
Pie
  • 63
  • 1
  • 8
-1
votes
1 answer

Windows equivalent of System.map?

I'm performing dynamic analysis on a windows VM in QEMU. I would like to look up what function is currently executing inside the Guest OS based on EIP (I just want to have an idea of what the OS is doing). Is there an equivalent of System.map for…
zje
  • 3,824
  • 4
  • 25
  • 31
1 2 3 4
5