« Back to home

NTrace paper published on computer.org

Our paper NTrace: Function Boundary Tracing for Windows on IA-32 from WCRE 2009 has now been published on computer.org: Abstract: For a long time, dynamic tracing has been an enabling technique for reverse engineering tools. Tracing can not only be used to record the control flow of a particular component such as a piece of malware itself, it is also a way to analyze the interactions of a component and their impact on the rest of the system. Continue »

I'll be at WCRE 2009 presenting NTrace

Next week, the 16th Working Conference on Reverse Engineering (WCRE) will be held in Lille, France. I will be there presenting NTrace: Function Boundary Tracing for Windows on IA-32. NTrace is a dynamic function boundary tracing toolkit for IA-32/x86 that can be used to trace both kernel and user mode Windows components – examples for components that can be traced include the kernel itself (ntoskrnl), drivers like NTFS as well as user mode components such as kernel32, shell32 or even explorer. Continue »

About Johannes

Johannes Passing lives in Melbourne, Australia, and works as a Staff Solutions Architect at Google Cloud where he helps customers around the globe make the most of Google Cloud IAM to secure their identities and resources.

Johannes also maintains several open-source projects and is the author of many security best practices published on the Google Cloud website.

Besides IAM, Johannes has a passion for software architecture and lean software development.

Johannes holds an M.Sc. in software systems engineering from Hasso Plattner Institute, is a Google-certitified Professional Cloud Architect and Professional Cloud Security Engineer and is ITILv3- and PRINCE2-certified.

Any opinions expressed on this blog are Johannes' own.

Contact Johannes at jpassing (at) hotmail com