AVCDL dynamic analysis overview

This training covers an overview of the AVCDL dynamic analysis process. AVCDL repo: https://github.com/AVCDL/AVCDL training material source: https://github.com/AVCDL/AVCDL/tree/main/training/dynamic%20analysis%20-%20overview/ References: Secure Settings Document (AVCDL secondary document) Fuzz Testing Report (AVCDL secondary document) Static Analysis Report (AVCDL secondary document) Security Options Qualification Report (AVCDL tertiary document) Static Analysis Results Interchange Format (SARIF) Version 2.1.0 https://docs.oasis-open.org/sarif/sarif/v2.1.0/os/sarif-v2.1.0-os.pdf Dynamic Program Analysis https://en.wikipedia.org/wiki/Dynamic_program_analysis Program Instrumentation Options [GCC] https://gcc.gnu.org/onlinedocs/gcc/Instrumentation-Options.html Address Sanitizer [LLVM] https://clang.llvm.org/docs/AddressSanitizer.html Thread Sanitizer [LLVM] https://clang.llvm.org/docs/ThreadSanitizer.html Memory Sanitizer [LLVM] https://clang.llvm.org/docs/MemorySanitizer.html Leak Sanitizer [LLVM] https://clang.llvm.org/docs/LeakSanitizer.html Undefined Behavior Sanitizer [LLVM] https://clang.llvm.org/docs/UndefinedBehaviorSanitizer.html Neutral Buoyancy https://www.nasa.gov/wp-content/uploads/2020/05/neutral_buoyancy_-_resized_1.jpg Chapters: 00:00 Title 00:09 Training Path 00:34 Introduction 01:27 Types and Tools 01:36 Dynamic Analysis Types 02:57 Memory Error Detection Tools 03:33 Workflow 03:43 Process Workflow 04:06 Activities 04:12 Establish Settings 05:30 Secure Settings 05:45 Instrument Element 06:35 Perform Analysis 08:12 Triage 09:23 Dynamic Analysis Report 10:49 Recap 10:56 Summary 11:26 Further Reading 11:37 AVCDL on GitHub 11:57 AVCDL on YouTube 12:13 Next Steps 12:22 References