Static program analysis assisted dynamic taint tracking for software vulnerability discovery

Computers and Mathematics with Applications

Volumn 63, Issue 2, 2012, Pages 469-480

  Zhang, Ruoyu ^a   Huang, Shiqiu ^a   Qi, Zhengwei ^a   Guan, Haibing ^a  

^a SHANGHAI JIAO TONG UNIVERSITY   (China)

Author keywords

Code coverage; Data flow analysis; Software vulnerability; Taint analysis

Indexed keywords

CODE COVERAGE; DATA FLOW; MALICIOUS BEHAVIOR; RUNTIMES; SECURITY PROBLEMS; SOFTWARE VULNERABILITIES; SOFTWARE VULNERABILITY; STATIC PROGRAM ANALYSIS; TAINT ANALYSIS; TRACING TECHNIQUE;

CODES (SYMBOLS); DYNAMIC ANALYSIS; SOFTWARE TESTING; STATIC ANALYSIS;

DATA FLOW ANALYSIS;

EID: 84855442829     PISSN: 08981221     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.camwa.2011.08.001     Document Type: Conference Paper

References (23)

1. CWE. http://cwe.mitre.org/.
2. V. Ganesh, T. Leek, M.C. Rinard, Taint-based directed whitebox fuzzing, in: International Conference on Software Engineering, ICSE, 2009.
3. P. Zuliani, A. Platzer, E.M. Clarke, Bayesian statistical model checking with application to simulink/stateflow verification, in: International Conference on Hybrid Systems: Computation and Control, HSCC, 2010.
4. P. Godefroid, M.Y. Levin, D.A. Molnar, Automated whitebox fuzz testing, in: Network and Distributed System Security Symposium, NDSS, 2008.
5. J.A. Clause, W. Li, A. Orso, Dytan: a generic dynamic taint analysis framework, in: Proceedings of the 2007 International Symposium on Software Testing and Analysis, 2007.
6. O. Tripp, M. Pistoia, S.J. Fink, M. Sridharan, and O. Weisman Taj: effective taint analysis of web applications Programming Language Design and Implementation 2009
7. H. Yin, D.X. Song, M. Egele, C. Kruegel, E. Kirda, Panorama: capturing system-wide information flow for malware detection and analysis, in: ACM Conference on Computer and Communications Security, CCS, 2007.
8. D. Bruening, T. Garnett, S. Amarasinghe, An infrastructure for adaptive dynamic optimization, in: International Symposium on Code Generation and Optimization, CGO, 2003.
9. C.-K. Luk, R. Cohn, R. Muth, H. Patil, A. Klauser, G. Lowney, S. Wallace, V.J. Reddi, K. Hazelwood, Pin: building customized program analysis tools with dynamic instrumentation, in: PLDI, 2005.
10. N. Nethercote, J. Seward, Valgrind: a framework for heavyweight dynamic binary instrumentation, in: Proc. of 2005 Programming Language Design and Implementation, PLDI, 2007.
11. J. Newsome, D. Song, Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on commodity software, in: Network and Distributed System Security Symposium, NDSS, 2005.
12. F. Qin, C. Wang, Z. Li, H.-S. Kim, Y. Zhou, Y. Wu, Lift: a low overhead practical information flow tracking system for detecting security attacks, in: Proceedings of the 39th Annual IEEE/ACM International Symposium on Microarchitecture, MICRO, 2006, pp. 135148.
13. T. Wang, T. Wei, Z. Lin, W. Zou, Intscope: automatically detecting integer overflow vulnerability in x86 binary using symbolic execution, in: Network and Distributed System Security Symposium, NDSS, 2009.
14. D. Brumley, D.X. Song, T. cker Chiueh, R. Johnson, H. Lin, Rich: automatically protecting against integer-based vulnerabilities, in: Network and Distributed System Security Symposium, NDSS, 2007.
15. A. Nguyen-Tuong, S. Guarnieri, D. Greene, J. Shirley, D. Evans, Automatically hardening web applications using precise tainting, in: 20th IFIP International Information Security Conference, 2005.
16. A. Aggarwal, P. Jalote, Integrating static and dynamic analysis for detecting vulnerabilities, in: 30th Annual International Computer Software and Applications Conference, 2006.
17. Y. Smaragdakis, C. Csallner, Combining static and dynamic reasoning for bug detection, in: TAP, 2007.
18. C. Csallner, Y. Smaragdakis, DSD-crasher: a hybrid analysis tool for bug finding, in: Proceedings of the 2007 International Symposium on Software Testing and Analysis, ISSTA, 2006.
19. D. Balzarotti, M. Cova, V. Felmetsger, N. Jovanovic, E. Kirda, C. Kruegel, G. Vigna, Saner: composing static and dynamic analysis to validate sanitization in web applications, in: IEEE Symposium on Security and Privacy, 2008.
20. W. Chang, B. Streiff, and C. Lin Efficient and extensible security enforcement using dynamic data flow analysis Proceedings of the 15th ACM Conference on Computer and Communications Security CCS'08 2008 ACM New York, NY, USA 39 50
21. M. Costa, M. Castro, L. Zhou, L. Zhang, and M. Peinado Bouncer: securing software by blocking bad input Proceedings of Twenty-First ACM SIGOPS Symposium on Operating Systems Principles SOSP'07 2007 ACM New York, NY, USA 117 130 (Pubitemid 351429372)
22. D.X. Song, D. Brumley, H. Yin, J. Caballero, I. Jager, M.G. Kang, Z. Liang, J. Newsome, P. Poosankam, P. Saxena, Bitblaze: a new approach to computer security via binary analysis, in: International Conference on Information Systems Security, ICISS, 2008.
23. CVE. http://cve.mitre.org/.