Identification of data propagation paths for efficient dynamic information flow tracking

Sanoop Mallissery, Yu-Sung Wu*, Chih Hao Hsieh, Chun An Bau

*此作品的通信作者

研究成果: Conference contribution同行評審

1 引文 斯高帕斯(Scopus)

摘要

Dynamic information flow tracking is a positive step towards the prevention of untrusted data injection and protection from possible exploits of such data. This emphasizes the importance of tracking the suspicious data flows at run-time to ensure neither the exploitation of data nor security violation. In this work, we have contemplated enhancing the competence of Static Taint Tracking (STT) to seamlessly support Dynamic Taint Tracking (DTT) using data flow analysis. The concept of definition-used (def-use) is used for source code analysis to capture the potential taint propagation paths represented using the Data Flow Graph (DFG). The extracted paths from the DFG provides prior information about all the potential taint propagation paths which extensively needed to be considered for DTT. We have tested our proposed methodology on some well-known benchmarks such as Firefox, SQLite3, Gzip, and Zlib. It is observed that the proposed method can identify all potential taint source propagation paths that cover pointers, branch conditions, inter-procedure, and inter-module data flows. The evaluation results show that this work will be very useful in guiding the dynamic taint tracking to achieve efficient and accurate detection of suspicious information flow.

原文English
主出版物標題35th Annual ACM Symposium on Applied Computing, SAC 2020
發行者Association for Computing Machinery
頁面92-99
頁數8
ISBN(電子)9781450368667
DOIs
出版狀態Published - 30 3月 2020
事件35th Annual ACM Symposium on Applied Computing, SAC 2020 - Brno, Czech Republic
持續時間: 30 3月 20203 4月 2020

出版系列

名字Proceedings of the ACM Symposium on Applied Computing

Conference

Conference35th Annual ACM Symposium on Applied Computing, SAC 2020
國家/地區Czech Republic
城市Brno
期間30/03/203/04/20

指紋

深入研究「Identification of data propagation paths for efficient dynamic information flow tracking」主題。共同形成了獨特的指紋。

引用此