• Pin Tool ➢ Introduction ➢ Instrumentation granularity ➢ Trace instrumentation ➢ Example ➢ Other important features • Dynamic Taint Analysis ➢ Introduction ➢ Classify of taint analysis ➢ Taint procedure ➢ Taint analysis for security

I. Program Analysis II. Data Flow Analysis ✓ Available Expressions ✓ Liveness Analysis ✓ Reaching Definitions ✓ Very Busy Expressions III.Theory Behind IV. Sensitivity V. Summary

南京大学：《软件安全 Software Security》课程教学资源（PPT课件讲稿）Return-Orinted Programming（ROP Attack）

• Threat Model • Control Flow Graph • Control Flow Integrity basic implementation – Build CFG – Instrumentation – Evaluation – Security and Adversary • Binary-CFI(CCFIR) – Introduce – Implementation – Context-Sensitive CFI

南京大学：《软件安全 Software Security》课程教学资源（PPT课件讲稿）Redundant dynamic Canary

Background Control Flow Hijack Control Flow Hijack Defense Canary Defense StackGuard StackGuard Weakness DiffGuard Polymorphic Canary Data Execution Prevention Definition DEP Scorecard Return-to-libc Attack ASLR ASLR Randomization ASLR

Software Security Course Overview Description Goal Text Books Course Schedule Prerequisites Tentative Course Project Teaching Assistant Contact Information Introduction to Software Security Background Root Cause of the Security Problems Vulnerability Exploits

重庆科技学院：《安全学原理》课程教学资源（PPT课件）第3讲（中文）文化与企业文化、安全文化的定义及发展、安全文化的结构与功能、企业安全文化建设

重庆科技学院：《安全学原理》课程教学资源（PPT课件）第2讲（中文）安全科学哲学基础、安全科学理论基础、三要素四因素理论、不足与展望

1. 目的和要求 2. 安全防护 3. 实验测量误差 4. 实验数据的表达 5. 计算机处理数据和作图