Explicit untainting to reduce shadow memory usage in dynamic taint analysis
- Authors
- Choi Y.H.[Choi Y.H.]; Park M.-W.[Park M.-W.]; Eom J.-H.[Eom J.-H.]; Chung T.-M.[Chung T.-M.]
- Issue Date
- 2014
- Keywords
- Data Flow Analysis; Dynamic Taint Analysis; Security
- Citation
- Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), v.8583 LNCS, no.PART 5, pp.175 - 184
- Journal Title
- Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
- Volume
- 8583 LNCS
- Number
- PART 5
- Start Page
- 175
- End Page
- 184
- URI
- https://scholarworks.bwise.kr/skku/handle/2021.sw.skku/57254
- DOI
- 10.1007/978-3-319-09156-3_13
- ISSN
- 1611-3349
- Abstract
- As the growth of computing technologies and smart service, the dimension for importance of security of a system has been increased dramatically. Many researches for solving threats of software vulnerabilities have been proposed in worldwide. Ordinary program testing method for finding defects in software can be categorized into black-box testing and white-box testing. In Black-box testing, the tester does not need to tasks recognization of the internal structure of program, whereas in white-box testing, the tester checks to tasks recognization of internal structure of program. Taint analysis is an efficient black-box testing method for finding exploited crashes by tracking external input to the program. However, taint analysis method is too heavy and slow to provide for commercial analysis program, because of large amount of computation and shadow memory usage. Recent, many experimental approaches to weight down and to speed up the analysis process, but it were lacking in commercial use. In this paper, we propose a method to reduce shadow memory usage by selectively not trace the definite untainting memories. Our evaluation result shows that we can reduce number of taint operation by significant amount. © 2014 Springer International Publishing.
- Files in This Item
- There are no files associated with this item.
- Appears in
Collections - Computing and Informatics > Computer Science and Engineering > 1. Journal Articles
- Information and Communication Engineering > School of Electronic and Electrical Engineering > 1. Journal Articles
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.