BitBlaze and BAP are two platforms to perform binary analysis. And, if I understand well, they are sharing lots of common features. What are their respective main features and in what do they differ from each other ?

1 Answer 1


BAP is mostly a rewrite of BitBlaze, so feature-wise there are many common features. However, many of these have been re-written or re-designed for BAP.

Common features:

  • Lifting of usermode, x86 instructions
  • Datafow analysis module
  • Dominator analysis
  • CFG and SSA representations
  • Optimization framework
  • Verification condition generation
  • Dependency graphs
  • Slicing

I am a BAP developer, so I can mainly attest to what is new in BAP since we split. However, I don't think BitBlaze has (publicly) added new features since then.

New in BAP:

  • Formally defined semantics for the IL
  • PIN-based user-level taint tracking and tracing tool
  • Integration with LLVM
  • Native instruction lifting (i.e., in OCaml)

Only in BitBlaze:

  • TEMU system-level taint tracking and tracing tool
  • thx for technical details, Ed. +1 :) Apr 8, 2013 at 20:14

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.