Aiding Static Analysis: Discovering Vulnerabilities in Binary Targets through Knowledge Graph Inferences

Aiding Static Analysis: Discovering Vulnerabilities in Binary Targets through Knowledge Graph Inferences

Static analysis is the foundation of vulnerability research (VR). Even with today's advanced genetic fuzzers, concolic analysis frameworks, emulation engines, and binary instrumentation tools, static analysis ultimately makes or breaks a successful VR program. In this talk, we will explore a method of enhancing our static analysis process using the GRAKN.AI implementation of Google's knowledge graph and explore the semantics from Binary Ninja's Medium Level static single assignment (SSA) intermediate language (IL) to perform inference queries on binary-only targets to identify vulnerabilities.

Presented by