BINSEC is an open-source toolset to help improve software security at the binary level. It relies on cutting-edge research in binary code analysis, at the intersection of formal methods, program analysis, security and software engineering. It is powered up by state-of-the-art techniques such as binary-level formal methods, symbolic execution, abstract interpretation, SMT solving and fuzzing.
BINSEC has been successfully applied in a number of security-related contexts, such as vulnerability finding, (malware) deobfuscation, decompilation, formal verification of assembly code or even binary-level formal verification.
It is developed at the CEA List institute of Université Paris-Saclay in collaboration with Verimag and LORIA.
An overview of some BINSEC features can be found in our tutorials. Further examples are bundled in our Docker image and OPAM package.
Current release is version 0.7.1 from 02/2023.We have frequent job openings for postdoc, PhD student and intern positions. Check up the news for ongoing calls or contact us if you believe that you could be a good match.
We have a fully funded open position for a 3 years PhD student, to work on security-oriented binary-level symbolic execution.
We have fully funded open positions for a 3 years PhD student and a 3 years Postdoc, to work on symbolic verification for micro-architectural attacks.
We have open positions to work for 3 years as a postdoc on advanced abstract interpretation techniques for binary code verification.
We have one open position to work for 3 years as a postdoc on understanding and detecting complex software vulnerabilities.
We have one open position to work for 3 years as a PhD student on artful vulnerability detection with fuzzing.