Answered step by step
Verified Expert Solution
Link Copied!

Question

1 Approved Answer

c. Consider the function foobar depicted below. Let us assume its input x is represented by a symbolic value and that foobar is explored using

image text in transcribed

image text in transcribed

c. Consider the function foobar depicted below. Let us assume its input x is represented by a symbolic value and that foobar is explored using a symbolic execution engine. 1 void foobar (unsigned int x) 2 { 3 unsigned int y; 4 5 if (x >= 100) { 6 // Error 7 assert (1 0); } else { 9 y = x + 30; 10 50) { 11 // Display value of x 12 printf("x is %d ", x); 13 } 14 } 15 } 8 if (y 9 i. Provide the symbolic expression of variable x at line 9. [2] ii. Provide the full path condition at line 11. [2] iii. Provide the list of line numbers which cause state forking. [2] iv. A SAT/SMT solver is queried to produce a concrete input for reach- ing line 11. Give the correct solution. [2] d. Vulnerabilities, exploitation, and mitigation techniques. i. Explain what exploitation technique(s) DEP (or NX) prevents. ii. Explain why taint analysis is useful in exploit generation. [1] [2] iii. Explain what heap spraying is and which exploit mitigation it tries to circumvent. [2] iv. Explain what a write-4 exploit primitive is and how it can be used to a execute code. [2] v. Explain what a use-after-free vulnerability is and how attackers can take advantage of it. [] [2]

Step by Step Solution

There are 3 Steps involved in it

Step: 1

blur-text-image

Get Instant Access to Expert-Tailored Solutions

See step-by-step solutions with expert insights and AI powered tools for academic success

Step: 2

blur-text-image_2

Step: 3

blur-text-image_3

Ace Your Homework with AI

Get the answers you need in no time with our AI-driven, step-by-step assistance

Get Started

Recommended Textbook for

Database Design Application Development And Administration

Authors: Michael V. Mannino

3rd Edition

0071107010, 978-0071107013

More Books

Students also viewed these Databases questions

Question

What do you think of the MBO program developed by Drucker?

Answered: 1 week ago