TainTrace: Efficient flow tracing with dynamic binary rewriting

Proceedings - IEEE Symposium on Computers and Communications

Volumn , Issue , 2006, Pages 749-754

  Cheng, Winnie ^a   Zhao, Qin ^b   Yu, Bei ^b   Hiroshige, Scott ^a  

^a MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

^b SINGAPORE MIT ALLIANCE   (Singapore)

Author keywords

[No Author keywords available]

Indexed keywords

BINARY CODES; COMPUTER CRIME; CONFORMAL MAPPING; DATA FLOW ANALYSIS; OPTIMIZATION; SUPERVISORY AND EXECUTIVE PROGRAMS;

FINE GRAINED MONITORING; FLOW TRACING TOOL; TAINTTRACE;

SECURITY OF DATA;

EID: 34547335786     PISSN: 15301346     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ISCC.2006.158     Document Type: Conference Paper

References (16)

1. Classification of red hat security alerts 2003. http://www.and.org/vstr/ security_problems.html.
2. Perl security manual page. http://www.perldoc.eom/perl5.6/pod/perlsec. html.
3. Valgrind. http://valgrind.org/.
4. K. Asheraft and D. Engler. Using programmer-written compiler extensions to catch security holes. In SP '02: Proceedings of the 2002 IEEE Symposium on Security and Privacy, 2002.
5. D. Bruening. Efficient, Transparent, and Comprehensive Runtime Code Manipulation. PhD thesis, Massachusetts Institute of Technology, September 2004. http://www.cag.csail.mit.edu/rio/.
6. J. Chow, B. Pfaff, T. Garfinkel, K. Christopher, and M. Rosenblum. Understanding data lifetime via whole system simulation. In 13th USENIX Security Symposium, 2004.
7. J. R. Crandall and F. T. Chong. Minos: Control data attack prevention orthogonal to memory model. In MICRO37, 2004.
8. V. Kiriansky, D. Bruening, and S. Amarasinghe. Secure execution via program shepherding. In 11th USENIX Security Symposium, 2002.
9. N. Nethercote. Dynamic Binary Analysis and Instrumentation. PhD thesis, University of Cambridge, November 2004.
10. J. Newsome and D. Song. Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on commodity software. In 12th Network and Distributed System Security Symposium, 2005.
11. Y. Ramin. http://www.redshift.com/yramin/atp/atphttpd/.
12. J. Seward and N. Nethercote. Using valgrind to detect undefined value errors with bit-precision. In Proceedings of the USENIX'05 Annual Technical Conference, 2005.
13. U. Shankar, K. Talwar, J. S. Foster, and D. Wagner. Detecting format string vulnerabilities with type qualifiers. In 10th USENIX Security Symposium, 2001.
14. S. Staniford, V. Paxson, and N. Weaver. How to own the internet in your spare time. In 11th USENIX Security Symposium, 2002.
15. G. E. Suh, J. Lee, D. Zhang, and S. Devadas. Secure program execution via dynamic information flow tracking. In ASPLOS-XI, 2004.
16. J. Wilander and M. Kamkar. A comparison of publicly available tools for dynamic buffer overflow prevention. In 10th Network and Distributed System Security Symposium, 2003.