Attack Surface Analysis for Java Applications

To find the attack surface for applications, it is necessary to track the data flows within them. Most existing data flow tracking tools are based on virtual machines. In this talk, we will look at a way to extract the names and parameters of Java functions running in a virtual machine running QEMU.