TASEL: Dynamic Taint Analysis with Selective Control Dependency
- Title
- TASEL: Dynamic Taint Analysis with Selective Control Dependency
- Author
- 유민수
- Keywords
- binary file analysis; control dependency; dynamic taint analysis; software analysis; vulnerability analysis
- Issue Date
- 2014-10
- Publisher
- Association for Computing Machinery, Inc
- Citation
- Research in Adaptive and Convergent Systems, 2014, P.272-277
- Abstract
- Dynamic Taint Analysis (DTA) is an approach used for software testing and vulnerability analysis. The vanilla DTA method is widely used, but its simple taint propagation does not consider any control dependency. Therefore, vanilla DTA generally suffers from the under-tainting caused by control dependency. The under-tainting can be problematic when analyzers try to check vulnerabilities of software. In this paper, we propose Dynamic Taint Analysis with Selective Control Dependency (TASEL), to mitigate the under-tainting problem caused by control dependency. Our technique detects control-dependent data which have possibilities to change the program's control flows. We implemented TASEL using Intel Pin, and applied it for the commodity programs such as Microsoft Notepad. Experimental results show our proposed method successfully resolves the under-tainting problem, without causing the over-tainting problem.
- URI
- https://dl.acm.org/citation.cfm?doid=2663761.2664219
- ISBN
- 978-1-4503-3060-2
- DOI
- 10.1145/2663761.2664219
- Appears in Collections:
- COLLEGE OF ENGINEERING[S](공과대학) > COMPUTER SCIENCE(컴퓨터소프트웨어학부) > Articles
- Files in This Item:
There are no files associated with this item.
- Export
- RIS (EndNote)
- XLS (Excel)
- XML