The Experts below are selected from a list of 23322 Experts worldwide ranked by ideXlab platform
Juan Caballero - One of the best experts on this subject based on the ideXlab platform.
-
SIGPATH: A Memory Graph Based Approach for Program Data Introspection and Modification
2015Co-Authors: David Urbina, Zhiqiang Lin, Juan Caballero, Ut DallasAbstract:Abstract. Examining and modifying data of interest in the memory of a tar-get program is an important capability for security applications such as memory forensics, rootkit detection, game hacking, and virtual machine Introspection. In this paper we present a novel memory graph based approach for program data Introspection and modification, which does not require source code, debugging symbols, or any API in the target program. It takes as input a sequence of mem-ory snapshots taken while the program executes, and produces a path signature, which can be used in different executions of the program to efficiently locate and traverse the in-memory data structures where the data of interest is stored. We have implemented our approach in a tool called SIGPATH. We have applied SIG-PATH to game hacking, building cheats for 10 popular real-time and turn-based games, and for memory forensics, recovering from snapshots the contacts a user has stored in four IM applications including Skype and Yahoo Messenger. Key words: program data Introspection, memory graph, game hacking
-
sigpath a memory graph based approach for program data Introspection and modification
European Symposium on Research in Computer Security, 2014Co-Authors: David I Urbina, Yufei Gu, Juan CaballeroAbstract:Examining and modifying data of interest in the memory of a target program is an important capability for security applications such as memory forensics, rootkit detection, game hacking, and virtual machine Introspection. In this paper we present a novel memory graph based approach for program data Introspection and modification, which does not require source code, debugging symbols, or any API in the target program. It takes as input a sequence of memory snapshots taken while the program executes, and produces a path signature, which can be used in different executions of the program to efficiently locate and traverse the in-memory data structures where the data of interest is stored. We have implemented our approach in a tool called SigPath. We have applied SigPath to game hacking, building cheats for 10 popular real-time and turn-based games, and for memory forensics, recovering from snapshots the contacts a user has stored in four IM applications including Skype and Yahoo Messenger.
Zhiqiang Lin - One of the best experts on this subject based on the ideXlab platform.
-
SIGPATH: A Memory Graph Based Approach for Program Data Introspection and Modification
2015Co-Authors: David Urbina, Zhiqiang Lin, Juan Caballero, Ut DallasAbstract:Abstract. Examining and modifying data of interest in the memory of a tar-get program is an important capability for security applications such as memory forensics, rootkit detection, game hacking, and virtual machine Introspection. In this paper we present a novel memory graph based approach for program data Introspection and modification, which does not require source code, debugging symbols, or any API in the target program. It takes as input a sequence of mem-ory snapshots taken while the program executes, and produces a path signature, which can be used in different executions of the program to efficiently locate and traverse the in-memory data structures where the data of interest is stored. We have implemented our approach in a tool called SIGPATH. We have applied SIG-PATH to game hacking, building cheats for 10 popular real-time and turn-based games, and for memory forensics, recovering from snapshots the contacts a user has stored in four IM applications including Skype and Yahoo Messenger. Key words: program data Introspection, memory graph, game hacking
-
pemu a pin highly compatible out of vm dynamic binary instrumentation framework
Virtual Execution Environments, 2015Co-Authors: Junyuan Zeng, Zhiqiang LinAbstract:Over the past 20 years, we have witnessed a widespread adoption of dynamic binary instrumentation (DBI) for numerous program analyses and security applications including program debugging, profiling, reverse engineering, and malware analysis. To date, there are many DBI platforms, and the most popular one is Pin, which provides various instrumentation APIs for process instrumentation. However, Pin does not support the instrumentation of OS kernels. In addition, the execution of the instrumentation and analysis routine is always inside the virtual machine (VM). Consequently, it cannot support any out-of-VM Introspection that requires strong isolation. Therefore, this paper presents PEMU, a new open source DBI framework that is compatible with Pin-APIs, but supports out-of-VM Introspection for both user level processes and OS kernels. Unlike in-VM instrumentation in which there is no semantic gap, for out-of-VM Introspection we have to bridge the semantic gap and provide abstractions (i.e., APIs) for programmers. One important feature of PEMU is its API compatibility with Pin. As such, many Pin plugins are able to execute atop PEMU without any source code modification. We have implemented PEMU, and our experimental results with the SPEC 2006 benchmarks show that PEMU introduces reasonable overhead.
-
Bridging the Semantic Gap in Virtual Machine Introspection via Online Kernel Data Redirection
ACM Transactions on Information and System Security, 2013Co-Authors: Zhiqiang LinAbstract:It is generally believed to be a tedious, time-consuming, and error-prone process to develop a virtual machine Introspection (VMI) tool because of the semantic gap. Recent advance shows that the semantic-gap can be largely narrowed by reusing the executed code from a trusted OS kernel. However, the limitation for such an approach is that it only reuses the exercised code through a training process, which suffers the code coverage issues. Thus, in this article, we present Vmst, a new technique that can seamlessly bridge the semantic gap and automatically generate the VMI tools. The key idea is that, through system wide instruction monitoring, Vmst automatically identifies the Introspection related data from a secure-VM and online redirects these data accesses to the kernel memory of a product-VM, without any training. Vmst offers a number of new features and capabilities. Particularly, it enables an in-VM inspection program (e.g., ps) to automatically become an out-of-VM Introspection program. We have tested Vmst with over 25 commonly used utilities on top of a number of different OS kernels including Linux and Microsoft Windows. The experimental results show that our technique is general (largely OS-independent), and it introduces 9.3X overhead for Linux utilities and 19.6X overhead for Windows utilities on average for the introspected program compared to the native in-VM execution without data redirection.
Lars Hall - One of the best experts on this subject based on the ideXlab platform.
-
choice blindness confabulatory Introspection and obsessive compulsive symptoms investigation in a clinical sample
Cognitive Therapy and Research, 2020Co-Authors: Shiu F Wong, Lars Hall, Frederick Aardema, Martha Giraldoomeara, Petter JohanssonAbstract:The content of obsessions in obsessive–compulsive disorder (OCD) often run contrary to the actual self of the individual experiencing them. The ego-dystonic nature of obsessions has led some researchers to propose that individuals with OCD form these false beliefs about themselves due to limited introspective access. The current study therefore aimed to extend on recent findings from non-clinical samples, which suggest the relevance of confabulatory Introspection on OCD symptoms, in a clinical population. Participants were community participants diagnosed with OCD (n = 54) or another anxiety or mood disorder (n = 28), as well as healthy individuals (n = 110). Groups completed the Choice Blindness Paradigm, an experimental task designed to have participants confabulate outside of their awareness. Contrary to predictions, the OCD group did not have a greater proportion of individuals who confabulated on this task. Furthermore, only within healthy participants was the occurrence of confabulation associated with elevated OCD symptoms. We speculate that confabulatory Introspection may be an important precursor to the development of clinical obsessions and its early detection could inform the prevention of obsessive–compulsive and related disorders. (Less)
-
choice blindness confabulatory Introspection and obsessive compulsive symptoms a new area of investigation
International Journal of Cognitive Therapy, 2014Co-Authors: Frederick Aardema, Petter Johansson, Lars Hall, Stellamarie Paradisis, Melha Zidani, Sarah RobertsAbstract:The current study is the first to investigate confabulatory Introspection in relation to clinical psychological symptoms utilizing the Choice Blindness Paradigm (CBP). It was hypothesized that those with obsessive-compulsive symptoms are more likely to confabulate mental states. To test this hypothesis, an experimental choice blindness task was administered in two nonclinical samples (n = 47; n = 76). Results showed that a confabulatory Introspection is significantly related to obsessive-compulsive symptoms. There was evidence for its specificity to symptoms of OCD depending on the obsessional theme addressed in the choice blindness task. However, confabulatory Introspection was also found to be relevant to other symptoms, including depression and schizotypy. The results highlight a potentially fruitful new area of clinical investigation in the area of insight and self-knowledge, not limited to OCD alone, but potentially other disorders as well.
-
reply to commentary by moore and haggard
Consciousness and Cognition, 2006Co-Authors: Lars Hall, Petter Johansson, Betty Tärning, Sverker Sikström, Andreas LindAbstract:We are very happy to see that Moore and Haggard (2006) welcome the introduction of CBP as a usefulexperimental method for investigating Introspection and intentionality, but while they urge caution in theextent of the application of our method, we can do nothing but energetically encourage its use. When Mooreand Haggard write ‘‘in line with Nisbett and Wilson’s hypothesis, the CBP suggests that our Introspections areconfabulatory’’, they are not entirely correct. The results of the studies we have done so far using the CPBsuggest that Introspections about (some forms of) decisions may (sometimes) be confabulatory. But the par-adigm itself is neutral about this point. In fact, from an analytic perspective we would have preferred to findclear patterns of differences between the NM- and M-reports, because that would have allowed us to startbuilding up a contrast case for different modes of introspective reporting, and to eventually perhaps arriveat a powerful generalization about truthful and confabulatory content. Now, as Moore and Haggard note,we have a more sweeping and difficult hypothesis to test in further experiments, namely that the NM-reportsmay contain lots of confabulatory elements too.What would it mean if this hypothesis were true? We suspect that part of the caution urged by Moore andHaggard about the CBP lies in a general worry that overstating the conclusions of the present findings coulddo wrongful damage to the image we have of ourselves as insightful and rational creatures. However, we feel itis unfortunate that efforts like those of Nisbett and Wilson (1977) and Wegner (2002) often get bundled withthe idea of a demotion of the powers of the human mind. They (and we) are not here to con people or tomanipulate them, but to map out the relationship between the concepts of everyday psychology and scientifictheories of Introspection and intentionality. As Dennett (1987) writes:Wewouldbeunwisetomodelourscientificpsychologytoocloselyontheseputativeillata(concreteentities)offolktheory.Wepostulatealltheseapparentactivitiesandmentalprocessesinordertomakesenseofthebehaviorweobserve—inorder,infact,tomakeasmuchsensepossibleofthebehavior,especiallywhenthebehavior we observe is our own...each of us is in most regards a sort of inveterate auto-psychologist,effortlesslyinventingintentionalinterpretationsofourownactionsinaninseparablemixofconfabulation,retrospective self-justification, and (on occasion, no doubt) good theorizing. (p. 91, emphasis in original).
Weggen Jenny - One of the best experts on this subject based on the ideXlab platform.
-
Review Essay: Dialogische Introspektion : eine Erweiterung des empirischen Methodenspektrums durch die Wiederentdeckung von Introspektionsverfahren
2012Co-Authors: Weggen JennyAbstract:Das Buch "Dialogische Introspektion. Ein gruppengestütztes Verfahren zur Erforschung des Erlebens" beschreibt die Wiederentdeckung und Weiterentwicklung eines weitgehend in Vergessenheit geratenen qualitativen Verfahrens im Methodenspektrum von Psychologie und Sozialwissenschaften. Die Hamburger Forschungswerkstatt um Thomas BURKART, Gerhard KLEINING und Harald WITT greift das Verfahren der Introspektion auf, systematisiert es und entwickelt es unter Bezugnahme auf neue Erkenntnisse der empirischen Sozialforschung weiter. Anhand von zahlreichen Beispielen der Anwendung und Analyse stellen die drei Herausgeber sowie weitere Beitragende ausführlich und sehr verständlich dar, wie sich die Methode historisch herleitet und worin ihre Vorzüge und Beschränkungen bestehen. Sie liefern zudem eine detaillierte Anleitung zur eigenen Verwendung der Methode und laden zum Ausprobieren ein. Darüber hinaus werden diverse Anwendungsfelder der Methode dargestellt – von der Psychotherapie über die Pädagogik bis zur Organisationsberatung –, die die Reichhaltigkeit der Methode erahnen lassen. Die Methode der dialogischen Introspektion verspricht, das empirische Methodenspektrum substanziell zu erweitern. Sie ist optimal zur Erhebung und Analyse von Datenmaterial geeignet, das Aufschluss über Erleben zulässt – ein Grundkonzept zum Verständnis zentraler Gegenstandsbereiche von Psychologie und Soziologie, das allerdings bisher in der Forschung nur wenig Beachtung findet.The book "Dialogic Introspection. A Group-based Method to Explore Personal Experience by Self-observation" describes the rediscovery and development of an almost forgotten qualitative method in the empirical toolbox of psychology and the social sciences. The Hamburger Forschungswerkstatt [Hamburg Group for qualitative-heuristic social research] chaired by Thomas BURKART, Gerhard KLEINING and Harald WITT revives the method of Introspection, and further systematizes and develops it based on new findings from empirical research. The editors and further contributors present a wide variety of application and analysis examples and explain, in a very clear and understandable manner, the advantages and limitations of the method as well as its historical derivation. They also provide a detailed guideline of how to use dialogic Introspection, inviting the reader to try it out. Moreover, the various contributions refer to concrete fields of application—including psychotherapy, pedagogics and organizational consulting—offering a glimpse into the richness of the method. The method of dialogic Introspection promises to expand the range of empirical methods substantially. It is ideal for collecting and analyzing data providing information about experience—a key concept for understanding the central issues in psychology and sociology. To date, the concept of experience has received little attention in psychological and sociological research.El libro "Introspección dialógica. Un método basado en grupos para explorar experiencias personales por observación propia" describe el redescubrimiento y desarrollo de un método cualitativo casi olvidado dentro de las herramientas empíricas de la psicología y las ciencias sociales. El Hamburgo Forschungswerkstatt [Grupo Hamburgo para la investigación social cualitativa – heurística] presidido por Thomas BURKART, Gerhard KLEINING y Harald WITT revive el método de introspección, lo sistematiza y desarrolla con base en los nuevos descubrimientos de la investigación empírica. Los editores y los otros colaboradores presentan una variedad amplia de aplicación y ejemplos de análisis y explican, de forma muy clara y entendible, las ventajas y limitaciones del método, así también como su derivación histórica. También brindan una detallada pauta sobre como utilizar la introspección dialógica, invitando al lector que la pruebe. Además, las varias contribuciones refieren a campos concretos de aplicación – incluyendo psicoterapia, pedagogía, y consultas organizacionales – ofreciendo un vistazo a la riqueza del método. El método de introspección dialógica promete expandir substancialmente el abanico de métodos empíricos. Es ideal para recolectar y analizar datos proporcionando información de la experiencia – un concepto clave para comprender los problemas centrales en psicología y sociología. A la fecha, el concepto de experiencia ha recibido poca atención en investigación psicológica y sociológica
-
Review Essay: Dialogische Introspektion: Eine Erweiterung des empirischen Methodenspektrums durch die Wiederentdeckung von Introspektionsverfahren
Forum Qualitative Sozialforschung Forum: Qualitative Social Research, 2011Co-Authors: Weggen JennyAbstract:El libro "Introspección dialógica. Un método basado en grupos para explorar experiencias personales por observación propia" describe el redescubrimiento y desarrollo de un método cualitativo casi olvidado dentro de las herramientas empíricas de la psicología y las ciencias sociales. El Hamburgo Forschungswerkstatt [Grupo Hamburgo para la investigación social cualitativa – heurística] presidido por Thomas BURKART, Gerhard KLEINING y Harald WITT revive el método de introspección, lo sistematiza y desarrolla con base en los nuevos descubrimientos de la investigación empírica. Los editores y los otros colaboradores presentan una variedad amplia de aplicación y ejemplos de análisis y explican, de forma muy clara y entendible, las ventajas y limitaciones del método, así también como su derivación histórica. También brindan una detallada pauta sobre como utilizar la introspección dialógica, invitando al lector que la pruebe. Además, las varias contribuciones refieren a campos concretos de aplicación – incluyendo psicoterapia, pedagogía, y consultas organizacionales – ofreciendo un vistazo a la riqueza del método. El método de introspección dialógica promete expandir substancialmente el abanico de métodos empíricos. Es ideal para recolectar y analizar datos proporcionando información de la experiencia – un concepto clave para comprender los problemas centrales en psicología y sociología. A la fecha, el concepto de experiencia ha recibido poca atención en investigación psicológica y sociológica.URN: http://nbn-resolving.de/urn:nbn:de:0114-fqs1201244The book "Dialogic Introspection. A Group-based Method to Explore Personal Experience by Self-observation" describes the rediscovery and development of an almost forgotten qualitative method in the empirical toolbox of psychology and the social sciences. The Hamburger Forschungswerkstatt [Hamburg Group for qualitative-heuristic social research] chaired by Thomas BURKART, Gerhard KLEINING and Harald WITT revives the method of Introspection, and further systematizes and develops it based on new findings from empirical research. The editors and further contributors present a wide variety of application and analysis examples and explain, in a very clear and understandable manner, the advantages and limitations of the method as well as its historical derivation. They also provide a detailed guideline of how to use dialogic Introspection, inviting the reader to try it out. Moreover, the various contributions refer to concrete fields of application—including psychotherapy, pedagogics and organizational consulting—offering a glimpse into the richness of the method. The method of dialogic Introspection promises to expand the range of empirical methods substantially. It is ideal for collecting and analyzing data providing information about experience—a key concept for understanding the central issues in psychology and sociology. To date, the concept of experience has received little attention in psychological and sociological research.URN: http://nbn-resolving.de/urn:nbn:de:0114-fqs1201244Das Buch "Dialogische Introspektion. Ein gruppengestütztes Verfahren zur Erforschung des Erlebens" beschreibt die Wiederentdeckung und Weiterentwicklung eines weitgehend in Vergessenheit geratenen qualitativen Verfahrens im Methodenspektrum von Psychologie und Sozialwissenschaften. Die Hamburger Forschungswerkstatt um Thomas BURKART, Gerhard KLEINING und Harald WITT greift das Verfahren der Introspektion auf, systematisiert es und entwickelt es unter Bezugnahme auf neue Erkenntnisse der empirischen Sozialforschung weiter. Anhand von zahlreichen Beispielen der Anwendung und Analyse stellen die drei Herausgeber sowie weitere Beitragende ausführlich und sehr verständlich dar, wie sich die Methode historisch herleitet und worin ihre Vorzüge und Beschränkungen bestehen. Sie liefern zudem eine detaillierte Anleitung zur eigenen Verwendung der Methode und laden zum Ausprobieren ein. Darüber hinaus werden diverse Anwendungsfelder der Methode dargestellt – von der Psychotherapie über die Pädagogik bis zur Organisationsberatung –, die die Reichhaltigkeit der Methode erahnen lassen. Die Methode der dialogischen Introspektion verspricht, das empirische Methodenspektrum substanziell zu erweitern. Sie ist optimal zur Erhebung und Analyse von Datenmaterial geeignet, das Aufschluss über Erleben zulässt – ein Grundkonzept zum Verständnis zentraler Gegenstandsbereiche von Psychologie und Soziologie, das allerdings bisher in der Forschung nur wenig Beachtung findet.URN: http://nbn-resolving.de/urn:nbn:de:0114-fqs120124
Petter Johansson - One of the best experts on this subject based on the ideXlab platform.
-
choice blindness confabulatory Introspection and obsessive compulsive symptoms investigation in a clinical sample
Cognitive Therapy and Research, 2020Co-Authors: Shiu F Wong, Lars Hall, Frederick Aardema, Martha Giraldoomeara, Petter JohanssonAbstract:The content of obsessions in obsessive–compulsive disorder (OCD) often run contrary to the actual self of the individual experiencing them. The ego-dystonic nature of obsessions has led some researchers to propose that individuals with OCD form these false beliefs about themselves due to limited introspective access. The current study therefore aimed to extend on recent findings from non-clinical samples, which suggest the relevance of confabulatory Introspection on OCD symptoms, in a clinical population. Participants were community participants diagnosed with OCD (n = 54) or another anxiety or mood disorder (n = 28), as well as healthy individuals (n = 110). Groups completed the Choice Blindness Paradigm, an experimental task designed to have participants confabulate outside of their awareness. Contrary to predictions, the OCD group did not have a greater proportion of individuals who confabulated on this task. Furthermore, only within healthy participants was the occurrence of confabulation associated with elevated OCD symptoms. We speculate that confabulatory Introspection may be an important precursor to the development of clinical obsessions and its early detection could inform the prevention of obsessive–compulsive and related disorders. (Less)
-
choice blindness confabulatory Introspection and obsessive compulsive symptoms a new area of investigation
International Journal of Cognitive Therapy, 2014Co-Authors: Frederick Aardema, Petter Johansson, Lars Hall, Stellamarie Paradisis, Melha Zidani, Sarah RobertsAbstract:The current study is the first to investigate confabulatory Introspection in relation to clinical psychological symptoms utilizing the Choice Blindness Paradigm (CBP). It was hypothesized that those with obsessive-compulsive symptoms are more likely to confabulate mental states. To test this hypothesis, an experimental choice blindness task was administered in two nonclinical samples (n = 47; n = 76). Results showed that a confabulatory Introspection is significantly related to obsessive-compulsive symptoms. There was evidence for its specificity to symptoms of OCD depending on the obsessional theme addressed in the choice blindness task. However, confabulatory Introspection was also found to be relevant to other symptoms, including depression and schizotypy. The results highlight a potentially fruitful new area of clinical investigation in the area of insight and self-knowledge, not limited to OCD alone, but potentially other disorders as well.
-
reply to commentary by moore and haggard
Consciousness and Cognition, 2006Co-Authors: Lars Hall, Petter Johansson, Betty Tärning, Sverker Sikström, Andreas LindAbstract:We are very happy to see that Moore and Haggard (2006) welcome the introduction of CBP as a usefulexperimental method for investigating Introspection and intentionality, but while they urge caution in theextent of the application of our method, we can do nothing but energetically encourage its use. When Mooreand Haggard write ‘‘in line with Nisbett and Wilson’s hypothesis, the CBP suggests that our Introspections areconfabulatory’’, they are not entirely correct. The results of the studies we have done so far using the CPBsuggest that Introspections about (some forms of) decisions may (sometimes) be confabulatory. But the par-adigm itself is neutral about this point. In fact, from an analytic perspective we would have preferred to findclear patterns of differences between the NM- and M-reports, because that would have allowed us to startbuilding up a contrast case for different modes of introspective reporting, and to eventually perhaps arriveat a powerful generalization about truthful and confabulatory content. Now, as Moore and Haggard note,we have a more sweeping and difficult hypothesis to test in further experiments, namely that the NM-reportsmay contain lots of confabulatory elements too.What would it mean if this hypothesis were true? We suspect that part of the caution urged by Moore andHaggard about the CBP lies in a general worry that overstating the conclusions of the present findings coulddo wrongful damage to the image we have of ourselves as insightful and rational creatures. However, we feel itis unfortunate that efforts like those of Nisbett and Wilson (1977) and Wegner (2002) often get bundled withthe idea of a demotion of the powers of the human mind. They (and we) are not here to con people or tomanipulate them, but to map out the relationship between the concepts of everyday psychology and scientifictheories of Introspection and intentionality. As Dennett (1987) writes:Wewouldbeunwisetomodelourscientificpsychologytoocloselyontheseputativeillata(concreteentities)offolktheory.Wepostulatealltheseapparentactivitiesandmentalprocessesinordertomakesenseofthebehaviorweobserve—inorder,infact,tomakeasmuchsensepossibleofthebehavior,especiallywhenthebehavior we observe is our own...each of us is in most regards a sort of inveterate auto-psychologist,effortlesslyinventingintentionalinterpretationsofourownactionsinaninseparablemixofconfabulation,retrospective self-justification, and (on occasion, no doubt) good theorizing. (p. 91, emphasis in original).
