Name
Abstract | ||
|---|---|---|
Dynamic Taint Analysis (DTA) is an approach used for software testing and vulnerability analysis. The vanilla DTA method is widely used, but its simple taint propagation does not consider any control dependency. Therefore, vanilla DTA generally suffers from the under-tainting caused by control dependency. The under-tainting can be problematic when analyzers try to check vulnerabilities of software. In this paper, we propose Dynamic Taint Analysis with Selective Control Dependency (TASEL), to mitigate the under-tainting problem caused by control dependency. Our technique detects control-dependent data which have possibilities to change the program's control flows. We implemented TASEL using Intel Pin, and applied it for the commodity programs such as Microsoft Notepad. Experimental results show our proposed method successfully resolves the under-tainting problem, without causing the over-tainting problem. |
Year | DOI | Venue |
|---|---|---|
2014 | 10.1145/2663761.2664219 | RACS |
Keywords | Field | DocType |
vulnerability analysis,security,control dependency,dynamic taint analysis,software analysis,binary file analysis,diagnostics | Vulnerability assessment,Computer science,Software analysis pattern,Real-time computing,Software,Taint checking,Commodity programs,Vulnerability,Software testing | Conference |
Citations | PageRank | References |
3 | 0.40 | 18 |
Authors | ||
5 | ||
Name | Order | Citations | PageRank |
|---|---|---|---|
| Byeongho Kang | 1 | 35 | 3.76 |
| Tae-Guen Kim | 2 | 35 | 4.94 |
| BooJoong Kang | 3 | 118 | 11.55 |
| Eul Gyu Im | 4 | 175 | 24.80 |
| Minsoo Ryu | 5 | 4 | 0.76 |