RE: Trace

Architecture and Background

David Weston & Tiller Beauchamp : RE:Trace: The Reverse Engineer's Unexpected Swiss Army Knife This presentation will detail the newest developments in RE:Trace, a reverse engineering framework based on Ruby and DTrace. We will discuss implementations for walking and searching the heap on OS X, tracing for kernel and driver vulnerabilities, pinpointing format string bugs and leveraging custom application probes, such as those built into browser and database software. David Weston is security researcher and penetration tester at Science Applications International Corporation.

Vulnerability Analysis

Pursuing a graduate degree his research interests include: Fuzzing and Reverse Engineering. He has an undergraduate degree from the University of California at Santa Barbara. Tiller Beauchamp works as a senior security consultant for SAIC providing security auditing services to large commercial, state and DoD customers.

Exploitation and Demonstrations

His areas of expertise include network penetration testing, web application security, IPv6 and exploit development. Beauchamp earned his M.S. in Computer Science from the University of Oregon with a specialization in software engineering.

Remediation and Defensive Strategies

He has worked as the lead developer for Team Defend, SAIC's portable computer and network defense exercise. Beauchamp is also responsible for maintaining the company's penetration toolkit and penlab. For copies of the slides and additional materials please see the DEF CON 16 Archive here: