I would not recommend POPA to people wanting to go down this road, its an extremely difficult text. Personally, just my 2 cents here, a far more useful text would be Practical Binary Analysis, https://practicalbinaryanalysis.com/ The Cousant's text is fascinating but requires a level of mathematical maturity at virtually post-doc researcher levels
Going to drop a toplevel comment and say while this is interesting (sincerely!) if people are interested in deeper tools/techniques the book Practical Binary Analysis is excellent, it ends in taint checking, symbolic excution techniques and uses Pin. https://practicalbinaryanalysis.com/ Also worth checking out is BAP, the Binary Analysis Platform, which is the successor…
…given by the VUSEC group, and unfortunately those are difficult to do remotely without the course infrastructure. The Binary and Malware Analysis course that you mentioned builds on top of the book "Practical Binary Analysis" by Dennis Andriesse, so you could grab a copy of that if you are interested.
……数百页的“逆向工程入门”（基本就是教你怎么从反编译出的汇编代码里认出 C 语言那部分），还有好多别的。我最近的一次底层硬核探索是读《实用二进制分析》这本书，本打算利用整个假期推完几个章节。但我始终没能对其中任何一个主题钻得足够深。我相信自己的脑子是能再往下多啃下几章的……
…hundreds of pages of "Beginner Reverse Engineering" (basically the part that teaches one to recognize C from decompiled assembly code), and many others. My most recent low level adventure was the book "Practical Binary Analysis" which I planned to use the whole holiday to push maybe a few chapters. But I never drilled deep enough into any of the topics. I believe I have the brain to drill at least a few more chapters deeper…
> glibc has very good backward compatibility, with careful symbol versioning and whatnot. Not in my experience. Working through exercises in Practical Binary Analysis, the first problem I needed to solve was running programs compiled against an older glibc on older Ubuntu on a new Ubuntu version with newer glibc, which boiled down to hunting down the glibc so from…
我不建议想走这条路的人去啃《POPA》，那是一本极难的书。就我个人的一点浅见，一本实用得多的书是《实用二进制分析》（Practical Binary Analysis），https://practicalbinaryanalysis.com/。库索夫妇（Cousot）的那本书确实很迷人，但它对数学成熟度的要求基本得达到博士后研究员的水平。
I would not recommend POPA to people wanting to go down this road, its an extremely difficult text. Personally, just my 2 cents here, a far more useful text would be Practical Binary Analysis, https://practicalbinaryanalysis.com/ The Cousant's text is fascinating but requires a level of mathematical maturity at virtually post-doc researcher levels
我发个主楼评论说一句，虽然这个东西很有意思（说真的！），但如果大家对更深入的工具/技术感兴趣，《实用二进制分析》这本书极其出色，它最后讲到了污点检查（taint checking）、符号执行（symbolic execution）技术，并用到了 Pin。https://practicalbinaryanalysis.com/ 另外也很值得去看看 BAP（Binary Analysis Platform），它是下一代……
Going to drop a toplevel comment and say while this is interesting (sincerely!) if people are interested in deeper tools/techniques the book Practical Binary Analysis is excellent, it ends in taint checking, symbolic excution techniques and uses Pin. https://practicalbinaryanalysis.com/ Also worth checking out is BAP, the Binary Analysis Platform, which is the successor…
……由 VUSEC 小组提供，可惜脱离了课程的基础设施，远程很难跟着做。你提到的二进制与恶意软件分析课程是基于丹尼斯·安德烈斯（Dennis Andriesse）的《实用二进制分析》一书展开的，感兴趣的话可以弄一本来看看。
…given by the VUSEC group, and unfortunately those are difficult to do remotely without the course infrastructure. The Binary and Malware Analysis course that you mentioned builds on top of the book "Practical Binary Analysis" by Dennis Andriesse, so you could grab a copy of that if you are interested.
……数百页的“逆向工程入门”（基本就是教你怎么从反编译出的汇编代码里认出 C 语言那部分），还有好多别的。我最近的一次底层硬核探索是读《实用二进制分析》这本书，本打算利用整个假期推完几个章节。但我始终没能对其中任何一个主题钻得足够深。我相信自己的脑子是能再往下多啃下几章的……
…hundreds of pages of "Beginner Reverse Engineering" (basically the part that teaches one to recognize C from decompiled assembly code), and many others. My most recent low level adventure was the book "Practical Binary Analysis" which I planned to use the whole holiday to push maybe a few chapters. But I never drilled deep enough into any of the topics. I believe I have the brain to drill at least a few more chapters deeper…
> glibc 的向后兼容性极好，有严谨的符号版本控制之类的。反正以我的经验来看并不是这样。在跟着《实用二进制分析》做习题时，我需要解决的第一个问题，就是把在旧版 Ubuntu 上针对旧版 glibc 编译的程序，跑在装有新版 glibc 的新版 Ubuntu 上，说白了就变成了到处去搜刮那个 glibc 的 so 动态库……
> glibc has very good backward compatibility, with careful symbol versioning and whatnot. Not in my experience. Working through exercises in Practical Binary Analysis, the first problem I needed to solve was running programs compiled against an older glibc on older Ubuntu on a new Ubuntu version with newer glibc, which boiled down to hunting down the glibc so from…