Description
Dynamic analysis provides a powerful framework for extracting actionable insights from running programs and enforcing runtime protections to enhance security. By instrumenting software during execution, we uncover vulnerabilities and gain a deeper understanding of their behavior in real-world conditions. This enables precise diagnosis and supports the development of targeted mitigations. Additionally, our runtime protection systems dynamically retrofit security mechanisms and privilege controls, strengthening applications without altering their original design. Dynamic analysis also plays a crucial role in generating test cases, improving test coverage, and producing inputs that better explore complex program behavior. Through these multifaceted applications, dynamic analysis bridges vulnerability discovery, runtime defense, and testing, delivering comprehensive solutions for secure and resilient software systems.
Solutions
Projects
Recent Blog Posts and News
Papers
- Precise and Comprehensive Provenance Tracking for Android Devices. MIT Technical Report Report, 2019
- SARAN: A System for Android Application Interposition. Aarno Labs Technical Report, 2021
- Tunable Cyber Defensive Mechanisms: Final Report. Aarno Labs Technical Report, 2022
- Automatic Exploitation of Fully Randomized Executables. MIT Technical Report, 2019
- Practically Correct, Just-in-Time Shell Script Parallelization. OSDI, 2022
- Preventing Dynamic Library Compromise on Node.js via RWX-Based Privilege Reduction. CCS, 2021
- Mir: Automated Quantifiable Privilege Reduction Against Dynamic Library Compromise in JavaScript. arXiv, 2021