English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Tools annual

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Tools monthly

Global: Zendy Plus monthly

Presents the access of premium content as premium feature

Premium Content

Global: Zendy Plus annual

Global: Zendy Free Plan

Dynamic taint analysis (DTA) has been widely used in varioussecurity-relevant scenarios that need to track the runtime information flow ofprograms. Dynamic binary instrumentation (DBI) is a prevalent technique inachieving effective dynamic taint tracking on commodity hardware and systems.However, the significant performance overhead incurred by dynamic taintanalysis restricts its usage in production systems. Previous efforts onmitigating the performance penalty fall into two categories, parallelizingtaint tracking from program execution and abstracting the tainting logic to ahigher granularity. Both approaches have only met with limited success.  In this work, we propose Sdft, an efficient approach that combines theprecision of DBI-based instruction-level taint tracking and the efficiency offunction-level abstract taint propagation. First, we build the library functionsummaries automatically with reachability analysis on the program dependencygraph (PDG) to specify the control- and data dependencies between the inputparameters, output parameters, and global variables of the target library. Thenwe derive the taint rules for the target library functions and develop tainttracking for library function that is tightly integrated into thestate-of-the-art DTA framework Libdft. By applying our approach to the core Clibrary functions of glibc, we report an average of 1.58x speed up of thetracking performance compared with Libdft64. We also validate the effectivenessof the hybrid taint tracking and the ability on detecting real-worldvulnerabilities.

Sdft: A PDG-based Summarization for Efficient Dynamic Data Flow Tracking