Catégorie: Conférence avec actes
Auteur: Olivier Levillain
Date: mai 2014
Série: Parsifal

Parsers are pervasive software basic blocks: as soon as a program needs to communicate with another program or to read a file, a parser is involved. However, writing robust parsers can be difficult, as is revealed by the amount of bugs and vulnerabilities related to programming errors in parsers. It is especially true for network analysis tools, which led the network and protocols laboratory of the French Network and Information Security Agency (ANSSI) to write custom tools. One of them, Parsifal, is a generic framework to describe parsers in OCaml, and gave us some insight into binary formats and parsers. After describing our tool, this article presents some use cases and lessons we learned about format complexity, parser robustness and the role the language used played.

Publié dans les actes 35. IEEE Security and Privacy Workshops (pages 191 à 197)

Présenté lors de la conférence SPW (LangSec) à San Jose, CA, USA en mai 2014

BibTeX Document Présentation