This project is about creating a vulnerable signature for a malicious x86 executable. Till now, most of the vulnerability are protected with signature, signatures based on the exploit input (or) patching the vulnerable problem. Now the problem is how do u protect the system with zero-day attacks(no patch and no exploit). To protect from that attack we create a vulnerability signature based on the vulnerable point in the binary program. Once the signature is created, it can be converted in to an executable and will be used as an wrapper for the vulnerable application.

Note: The vulnerability signature consists of all the statements from the vulnerable point till the starting of the program(from where the input is read). So, the vulnerability signature indeed contains all the relevant statements which triggers the vulnerability condition.

To submit a quote, send it to e9b5b79d8b2e5b3a1d7bbc1866506bd565e8eec5@rfp.input0.com

Posted on Jun, 19 2009