security-paper

Security Papers

(与本人兴趣强相关的)各种安全or计算机资料收集，如侵权请联系我删除～

book, manual, paper, blog, slides, report, course, survey，tool, online, video

Architecture

• 2014 manual ARM_Architecture_Reference_Manual_ARMv7-A_and_ARMv7-R_edition
• 2019 manual Arm_Architecture_Reference_Manual
• 2019 manual Intel_64_and_IA-32_Architectures_Software_Developers_Manual
• 2017 slides A_tour_of_the_ARM_architecture_and_its_Linux_support

Reverse Engineering

• 2005 book Reversing_Secrets_of_Reverse_Engineering
• 2016 book anti-reverse-engineering-linux
• 2016 paper An_In-Depth_Analysis_of_Disassembly_on_Full-Scale_x86x64_Binaries
• 2018 slides Unpacking_for_Dummies
• 2019 book Reverse_Engineering_for_Beginners
• 2019 slides Three_Heads_Are_Better_Than_One_Mastering_NSAs_Ghidra_Reverse_Engineering_Tool
• 2020 paper An_Observational_Investigation_of_Reverse_Engineers_Processes

Program Analysis

• 2004 book Principles_of_Program_Analysis
• 2005 paper WYSINWYX_What_You_See_Is_Not_What_You_eXecute
• 2007 paper CUTE_A_Concolic_Unit_Testing_Engine_for_C
• 2010 paper All_You_Ever_Wanted_to_Know_About_Dynamic_Taint_Analysis_and_Forward_Symbolic_Execution-but_might_have_been_afraid_to_ask
• 2012 paper Unleashing_MAYHEM_on_Binary_Code
• 2016 paper SVF_Interprocedural_Static_Value-Flow_Analysis_in_LLVM
• 2018 paper A_Survey_of_Symbolic_Execution_Techniques
• 2018 slides Intro_to_Binary_Analysis_with_Z3_and_Angr
• 2018 slides The_NOT-SO-PROFITABLE_Path_Towards_Automated_Heap_Exploitation
• 2018 slides Finding_security_vulnerabilities_with_modern_fuzzing_techniques
• 2019 book SAT-SMT_by_example
• 2019 book Static_Program_Analysis

Malware

• 2010 slides Malware-Analysis-Training
• 2017 slides Dr_Honeypots
• 2017 slides Digital_Vengeance_Exploiting_the_Most_Notorious_C&C_Toolkits
• 2017 paper Understanding_the_Mirai_Botnet
• 2018 paper Understanding_Linux_Malware
• 2018 slides Modern Linux Malware Exposed
• 2018 slides Trojans_in_SS7-how_they_bypass_all_security_measures
• 2019 slides Fileless_Malware_and_Process_Injection_in_Linux

Exploitation

• 1998 paper StackGuard_Automatic_Adaptive_Detection_and_Prevention_of_Buffer-Overflow_Attacks
• 2001 blog Exploiting_Format_String_Vulnerabilities
• 2001 blog The_advanced_return-into-libc_exploits
• 2002 blog Advances_in_format_string_exploitation
• 2005 paper Control-Flow_Integrity_Principles_Implementations_and_Applications
• 2007 slides Understanding_the_heap_by_breaking_it
• 2008 book Hacking-The_Art_of_Exploitation_2nd_Edition
• 2009 paper Surgically_Returning_to_Randomized_libc
• 2009 blog MALLOC_DES-MALEFICARUM
• 2010 paper G-Free_Defeating_Return-Oriented_Programming_through_Gadget-less_Binaries
• ★★★☆☆ 2011 book 0day安全-软件漏洞分析技术第2版
• 2011 paper Q_Exploit_Hardening_Made_Easy
• 2011 paper Jump-Oriented_Programming_A_New_Class_of_Code-Reuse_Attack
• 2012 paper Return-Oriented_Programming_Systems_Languages_and_Applications
• 2012 paper Understanding_Integer_Overflow_in_C:C++
• 2013 paper Just-in-time_code_reuse_On_the_effectiveness_of_fine-grained_address_space_layout_randomization
• 2013 paper Transparent_ROP_Exploit_Mitigation_using_Indirect_Branch_Tracing
• ★★★★★ 2014 paper Hacking_Blind
• ★★★★★ 2014 paper Framing_Signals—A_Return_to_Portable_Shellcode
• 2014 paper Code-Pointer_Integrity
• ★★★★★ 2015 paper How_the_ELF_Ruined_Christmas
• 2015 blog Glibc_Adventures_The_Forgotten_Chunks
• ★★★☆☆ 2015 course Modern_Binary_Exploitation
• 2015 paper Automatic_Generation_of_Data-Oriented_Exploits
• 2016 paper New_Exploit_Methods_against_Ptmalloc_of_GLIBC
• 2016 paper LAVA_Large-scale_Automated_Vulnerability_Addition
• 2017 paper ASLR_on_the_Line_Practical_Cache_Attacks_on_the_MMU
• 2017 blog Cyber_Grand_Shellphish
• 2018 survey 缓冲区溢出漏洞分析技术研究进展
• 2019 survey 安全漏洞自动利用综述
• 2019 survey The_Art_Science_and_Engineering_of_Fuzzing_A_Survey
• 2020 paper Typestate-Guided_Fuzzer_for_Discovering_Use-after-Free_Vulnerabilities

Fuzz

• 2020 paper IJON_Exploring_Deep_State_Spaces_via_Fuzzing
• 2020 paper AFLNet: A Greybox Fuzzer for Network Protocols

IOT

• 2006 paper IoT/Vulnerabilities_in_first-generation_RFID-enabled_credit_cards
• 2013 book Hacking the Xbox
• 2013 paper FIE_on_Firmware_Finding_Vulnerabilities_in_Embedded_Systems_Using_Symbolic_Execution
• 2014 paper A_Large-Scale_Analysis_of_the_Security_of_Embedded_Firmwares
• 2015 slides Advanced_SOHO_Router_Exploitation
• 2015 slides Cameras_Thermostats_and_Home_Automation_Controllers
• 2015 paper Firmalice-Automatic_Detection_of_Authentication_Bypass_Vulnerabilitiesin_Binary_Firmware
• 2016 paper Towards_Automated_Dynamic_Analysis_for_Linux-based_Embedded_Firmware
• 2016 paper Scalable_Graph-based_Bug_Search_for_Firmware_Images
• 2017 paper IoT_Goes_Nuclear_Creating_a_Zigbee_Chain_Reaction
• 2017 slides Reversing FreeRTOS on embedded devices
• ★★☆☆☆ 2017 survey 物联网安全综述
• ★☆☆☆☆ 2018 survey 智能家居安全综述
• 2018 survey 物联网操作系统安全研究综述
• ★★★☆☆ 2018 report 智能设备安全分析手册
• 2018 slides Fitbit Firmware Hacking
• 2018 slides Reversing_IoT_Xiaomi_ecosystem
• 2018 slides Bushwhacking your way around a bootloader
• 2018 slides Dissecting_QNX
• 2018 slides Hacking_Toshiba_Laptops
• 2018 slides Subverting_your_server_through_its_BMC_the_HPE_iLO4_case
• 2018 slides DIY_ARM_Debugger_for_Wi-Fi_Chips
• 2018 survey Program_Analysis_of_Commodity_IoT_Applications_for_Security_and_Privacy_Challenges_and_Opportunities
• 2018 paper Hackers_vs_Testers_A_Comparison_of_Software_Vulnerability_Discovery_Processes
• ★★★★☆ 2018 paper What_You_Corrupt_Is_Not_What_You_Crash_Challenges_in_Fuzzing_Embedded_Devices
• 2018 paper IoTFuzzer_Discovering_Memory_Corruptions_in_IoT_Through_App-based_Fuzzing
• 2018 paper Sensitive_Information_Tracking_in_Commodity_IoT
• 2018 paper DTaint_Detecting_the_Taint-Style_Vulnerability_in_Embedded_Device_Firmware
• 2018 slides Beginners_Guide_on_How_to_Start_Exploring_IoT_Security
• 2019 paper CryptoREX_Large-scale_Analysis_of_Cryptographic_Misuse_in_IoT_Devices
• 2019 slides Firmware_Extraction
• ★☆☆☆☆ 2019 report 2019物联网安全年报
• 2019 blog ANATOMY_OF_A_FIRMWARE_ATTACK
• *2019