BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//bsides-joburg-2026//talk//3JE8KJ
BEGIN:VTIMEZONE
TZID:Africa/Johannesburg
BEGIN:STANDARD
DTSTART:20250725T000000
TZNAME:SAST
TZOFFSETFROM:+0200
TZOFFSETTO:+0200
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:Lighting the Way in the Dark: Binary-Only Race Detection in Go wit
 h Zorya-Volos - Keith Makan
DTSTART;TZID=Africa/Johannesburg:20260725T120500
DTEND;TZID=Africa/Johannesburg:20260725T125000
DTSTAMP:20260726T032428Z
UID:pretalx-bsides-joburg-2026-3JE8KJ@pretalx.com
DESCRIPTION:"How do I find race conditions in a Go binary without being a 
 wizard? Do any tools actually cater to real-world\, off-the-shelf binaries
 ?" When source code is unavailable\, Go’s runtime acts as a dark\, impen
 etrable black box where traditional scanners fail. Given the prevalence of
  Go in critical cloud infrastructure and high-stakes cryptocurrency enviro
 nments\, these "invisible" vulnerabilities represent a significant and und
 er-addressed security risk.\n\nTo address this\, we present Zorya-Volos\, 
 a specialized framework that lights the way into the obscured depths of Go
  runtime internals and concurrent behavior\, bridging the gap between theo
 retical research and practical\, in-depth security assessment. Zorya-Volos
  is built by leveraging Ghidra’s P-Code intermediate representation\, pr
 ocessed through an internally developed translation layer that interfaces 
 directly with the Z3 SMT solver to model binary execution paths with mathe
 matical rigor. Zorya-Volos differentiates itself from other approaches by 
 (i) being rigorously tested on COTS binaries\, (ii) fielding a hybrid race
  detection algorithm developed through deep binary analysis to identify bo
 th lock inconsistencies and race-able memory access\, and (iii) utilizing 
 symbolic execution for the comprehensive modelling of execution paths.\n\n
 Expanding on our Black Hat Asia presentation\, we demonstrate how this eng
 ine maps runtime scheduler behavior to state-changing operations within th
 e binary. We will explore the technical challenges of symbolic execution a
 t scale\, showcasing how our approach successfully identifies critical con
 currency flaws and null pointer dereferences that current industry tooling
  and automated scanners consistently overlook in production environments.
LOCATION:Track 2
URL:https://pretalx.com/bsides-joburg-2026/talk/3JE8KJ/
END:VEVENT
END:VCALENDAR