On the deployment of dynamic taint analysis for application communities

IEICE Transactions on Information and Systems

Volumn E92-D, Issue 3, 2009, Pages 548-551

  Kim, Hyung Chan ^a   Keromytis, Angelos ^a  

^a Columbia University ^*  (United States)

Author keywords

0 day attack detection; Application community; Dynamic taint analysis; Software security

Indexed keywords

INFORMATION SCIENCE; SOFTWARE ENGINEERING;

APACHE WEB SERVER; ATTACK DETECTION; DYNAMIC TAINT ANALYSIS; MEDIUM SIZE; PROGRAM EXECUTION; SOFTWARE ATTACKS; SOFTWARE SECURITY; WORM OUTBREAK;

APPLICATION PROGRAMS;

EID: 77950329480     PISSN: 09168532     EISSN: 17451361     Source Type: Journal    
DOI: 10.1587/transinf.E92.D.548     Document Type: Letter

References (21)

1. C. Luk, R. Cohn, R. Muth, H. Patil, A. Klauser, G. Lowney, S. Wallace, V. J. Reddi, and K. Hazelwood, "Pin: Building customized program analysis tools with dynamic instrumentation, " Proc. ACM SIGPLAN Conf. on Programming Language Design and Implementation (PLDI), pp. 190-200, 2005.
2. N. Nethercote and J. Seward, "Valgrind: A framework for heavyweight dynamic binary instrumentation, " SIGPLAN Not., vol. 42, no. 2, pp. 89-100, 2007.
3. J. Newsome and D. Song, "Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on commodity software, " Proc. 12th Symposium on Network and Distributed System Security (NDSS), 2005.
4. F. Qin, C. Wang, Z. Li, H. Kim, Y. Zhou, and Y. Wu, "LIFT: A low-overhead practical information flow tracking system for detecting security attacks, " Proc. 39th Annual IEEE/ACM International Symposium on Microarchitecture, pp. 135-148, 2006.
5. J. Clause, W. Li, and A. Orso, "Dytan: A generic dynamic taint analysis framework, " Proc. International Symposium on Software Testing and Analysis, pp. 196-206, 2007.
6. G. Portokalidis, A. Slowinska, and H. Bos, "Argos: An emulator for fingerprinting zero-day attacks for advertised honeypots with automatic signature generation, " Proc. 1st ACM SIGOPS/EuroSys European Conference on Computer Systems (EuroSys), pp. 15-27, 2006.
7. H. Yin, D. Song, M. Egele, C. Kruegel, and E. Kirda, "Panorama: Capturing system-wide information flow for malware detection and analysis, " Proc. 14th ACM Conf. on Computer and Communications Security (CCS), pp. 116-127, 2007.
8. G. Goth, "Addressing the monoculture, " IEEE Security & Privacy, vol. 1, no. 6, pp. 8-10, 2003.
9. M. Locasto, S. Sidiroglou, and A. D. Keromytis, "Software selfhealing using collaborative application communities, " Proc. 13th Symposium on Network and Distributed System Security (NDSS), pp. 95-106, 2006.
10. J. Wilander and M. Kamkar, "A comparison of publicly available tools for dynamic buffer overflow prevention, " Proc. 10th Symposium on Network and Distributed System Security (NDSS), pp. 149-162, 2003.
11. C. Zou, L. Gao, W. Gong, and D. Towsley, "Monitoring and early warning for internet worms, " Proc. 10th ACM Conf. on Computer and Communications Security (CCS), pp. 190-199, 2003.
12. S. Staniford, V. Paxson, and N. Weaver, "How to own the internet in your spare time, " Proc. 11th USENIX Security Symposium, pp. 149-167, 2002.
13. http://scragz.com/tech/mozilla/test-rendering-time.php
14. http://nvd.nist.gov/nvd.cfm?cvename=CVE-2004-0940
15. http://nvd.nist.gov/nvd.cfm?cvename=CVE-2004-1373
16. http://nvd.nist.gov/nvd.cfm?cvename=CVE-2002-1816
17. http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-4060
18. http://www.securityfocus.com/bid/30034
19. http://www.apache.org/
20. http://www.hpl.hp.com/research/linux/httperf/
21. http://www.isi.deterlab.net/