The .stp file

[mariem]

Hi,
I would like to know how the data analysis take place using Bitblaze?
is that the .stp file will be used by TEMU?
Thanks

[Stephen McCamant]

>>>>> "MG" == mariem <marie...@gmail.com> writes:

MG> Hi,
MG> I would like to know how the data analysis take place using
MG> Bitblaze?

I'm afraid I'm having a hard time understanding your question. "Data
analysis" doesn't sound like a description of any thing we usually do
with BitBlaze, except if you interpret it very broadly so that it
could apply to almost anything.

MG> is that the .stp file will be used by TEMU?

The .stp file is not used by TEMU. We use the extension ".stp" for a
file that consists of a formula to be solved by the decision procedure
STP, or a compatible constraint solving program. You can use Vine to
create formulas in the format.

Hope this helps,

-- Stephen

[mariem graa]

Hi,
thank you for your help,but i don't understand how BiItblaze exactly works :

• Are you in a first step doing a dynamic analysis and  tainting the data using TEMU

• and then  in in a second step Are you taking a trace of the execution which will be an input of VINE, you build a .il file and a .stp file
  
• and then in a third step you continue the dynamic analysis with TEMU?

how you doing the static and dynamic analysis combination and how you detect the vulnerabilities?

Thank you very much

Mariem.

2012/2/12 Stephen McCamant <sm...@cs.berkeley.edu>

[Alex Bazhanyuk]

input_data -> software in TEMU -> trace
trace -> appreplay -> IR code
IR code -> wputil -> STP code
STP code -> STP -> input_data (the result of stp. offset which is like input_data)