PostBluehat

October 5, 2007

The best laid plans of mice and men… How’s that go?  Unfortunately, I fed the gremlins before midnight or something the day before my presentation and I was not able to show the epic WPF visualizations I had planned.  Better late than never, here are 2 different perspectives of the native heap.  Green is an allocated busy block, red is anything else right now.  I have a ton more data to display but have been working on the interactivity and having the various chunks be more useable.  Right now there just blocks, though they are relative to the actual size, color coded and laid out in a representative fashion to where they lie in the address space.  They do not individually respond when clicked on, to detail the specifics of their allocation.You can definitely see the patterns and layout of the heap, including the pattern demonstrated by the link lists that manage individual sizes.  (re: CORE Security Technologies Gera R. has a paper on heap-defragmentation).I’ll blog more about this process soon; I’m still on the road having just gone to a SwA (Software Assurance) conference in DC (sounds spooky).  There was an interesting talk by Rick Kuhn of NIST on Combinatorial testing and covering array generation. That’s it for now, more soon. Heap View 1Heap view 2

Advertisements

More Interesting Visualizations

September 19, 2007

Here are a few of the papers that I took a look at that were interesting, at least the papers I read in the past couple days.

Either way, I like some of their stuff. I think that when I implement this for native C++ (later tonight), I’m going to try to use an approach where;

My system is based on live analysis of native binary code. The one thing that I’m going to discuss, is the varying methods to represent an object during its lifetime with functional visualizations (i.e. that show more than simple linear relationships between object classes).

TAU

I’ve been playing around with TAU a lot, pretty interesting. I’ve been porting the Open Trace Format (OTF) to C# for use in managed / WPF visualization related work.

Even though this link is a bit old I did learn a lot about Kiviat diagrams, they also have a neat simulation that depicts the live execution context of a process while it run’s in system memory.

http://www.cs.uoregon.edu/research/paraducks/papers/tr9323.d/#s7.1.3