Dynamic Flash Instrumentation for Fun and Profit

Explore dynamic analysis techniques for malicious Flash files in this 50-minute Black Hat conference talk. Learn about a groundbreaking tool that enables efficient analysis without the need for decompilation, utilizing binary instrumentation to log interesting method calls. Discover how this approach significantly accelerates the analysis process for individual files and enables detailed automatic analysis of malicious Flash objects. Gain insights into overcoming challenges posed by commercial protection tools like DoSWF and secureSWF, which are commonly used in recent Flash exploits and malicious redirectors. Understand the advantages of dynamic analysis over static analysis, particularly when dealing with encryption algorithms, keys, and code obfuscation techniques.