Ph.D. Research Assistant Department of Computer Science University of Arizona
Gould-Simpson Building 1040 E. 4th Street Tucson, AZ 85721
kfligg at cs dot arizona dot edu
I am an RA working with my advisor, Dr. Saumya Debray.
I am currently researching how to differentiate valid and invalid instructions in a given disassembly. Where a valid instruction is one that would actually be executed should the program be run. Invalid instructions can arise when the disassembler is unable to determine correct address boundaries for instructions. This can occur because Intel x86 instructions are variable length. The problem is most frequently associated with binary files that have been modified to make disassembly difficult, and thus discourage reverse engineering. Often, malware utilizes these anti-disassembly techniques to delay detection and cleaning.
B.S. Computer Science, Minor Mathematics, Magna Cum Laude, University of Arizona, 2007
