TaintTrace: Efficient Flow Tracing with Dynamic Binary Rewriting

Authors:
Winnie Cheng;Qin Zhao;Bei Yu;Scott Hiroshige
Affiliations:
Massachusetts Institute of Technology, USA;Singapore-MIT Alliance;Singapore-MIT Alliance;Massachusetts Institute of Technology, USA
Venue:
ISCC '06 Proceedings of the 11th IEEE Symposium on Computers and Communications
Year:
2006

Citing 0
Cited 31

Hunting Trojan Horses

Proceedings of the 1st workshop on Architectural and system support for improving software dependability
Valgrind: a framework for heavyweight dynamic binary instrumentation

Proceedings of the 2007 ACM SIGPLAN conference on Programming language design and implementation
How to shadow every byte of memory used by a program

Proceedings of the 3rd international conference on Virtual execution environments
Efficient fine-grained binary instrumentationwith applications to taint-tracking

Proceedings of the 6th annual IEEE/ACM international symposium on Code generation and optimization
From Speculation to Security: Practical and Efficient Information Flow Tracking Using Speculative Hardware

ISCA '08 Proceedings of the 35th Annual International Symposium on Computer Architecture
Support for symmetric shadow memory in multiprocessors

PADTAD '08 Proceedings of the 6th workshop on Parallel and distributed systems: testing, analysis, and debugging
Towards automatic reverse engineering of software security configurations

Proceedings of the 15th ACM conference on Computer and communications security
Algorithms and tool support for dynamic information flow analysis

Information and Software Technology
Architectural support for shadow memory in multiprocessors

Proceedings of the 2009 ACM SIGPLAN/SIGOPS international conference on Virtual execution environments
Runtime monitoring on multicores via OASES

ACM SIGOPS Operating Systems Review
Self-recovery in server programs

Proceedings of the 2009 international symposium on Memory management
Application security code analysis: a step towards software assurance

International Journal of Information and Computer Security
Dynamic integrity measurement and attestation: towards defense against return-oriented programming attacks

Proceedings of the 2009 ACM workshop on Scalable trusted computing
Neon: system support for derived data management

Proceedings of the 6th ACM SIGPLAN/SIGOPS international conference on Virtual execution environments
Umbra: efficient and scalable memory shadowing

Proceedings of the 8th annual IEEE/ACM international symposium on Code generation and optimization
How to do a million watchpoints: efficient debugging using dynamic instrumentation

CC'08/ETAPS'08 Proceedings of the Joint European Conferences on Theory and Practice of Software 17th international conference on Compiler construction
Efficient memory shadowing for 64-bit architectures

Proceedings of the 2010 international symposium on Memory management
Efficient dynamic program monitoring on multi-core systems

Journal of Systems Architecture: the EUROMICRO Journal
TaintDroid: an information-flow tracking system for realtime privacy monitoring on smartphones

OSDI'10 Proceedings of the 9th USENIX conference on Operating systems design and implementation
TaintEraser: protecting sensitive data leaks using application-level taint tracking

ACM SIGOPS Operating Systems Review
Dynamic cache contention detection in multi-threaded applications

Proceedings of the 7th ACM SIGPLAN/SIGOPS international conference on Virtual execution environments
Tightlip: keeping applications from spilling the beans

NSDI'07 Proceedings of the 4th USENIX conference on Networked systems design & implementation
Taint-exchange: a generic system for cross-process and cross-host taint tracking

IWSEC'11 Proceedings of the 6th International conference on Advances in information and computer security
Transparent dynamic instrumentation

VEE '12 Proceedings of the 8th ACM SIGPLAN/SIGOPS conference on Virtual Execution Environments
Minemu: the world's fastest taint tracker

RAID'11 Proceedings of the 14th international conference on Recent Advances in Intrusion Detection
AddressSanitizer: a fast address sanity checker

USENIX ATC'12 Proceedings of the 2012 USENIX conference on Annual Technical Conference
Binary stirring: self-randomizing instruction addresses of legacy x86 binary code

Proceedings of the 2012 ACM conference on Computer and communications security
DTAM: dynamic taint analysis of multi-threaded programs for relevancy

Proceedings of the ACM SIGSOFT 20th International Symposium on the Foundations of Software Engineering
Detecting control flow in smarphones: combining static and dynamic analyses

CSS'12 Proceedings of the 4th international conference on Cyberspace Safety and Security
TaintDroid: an information flow tracking system for real-time privacy monitoring on smartphones

Communications of the ACM
On quantitative dynamic data flow tracking

Proceedings of the 4th ACM conference on Data and application security and privacy

Quantified Score

Hi-index	0.02

Visualization

Abstract

TaintTrace is a high performance flow tracing tool that protects systems against security exploits. It is based on dynamic execution binary rewriting empowering our tool with fine-grained monitoring of system activities such as the tracking of the usage and propagation of data originated from the network. The challenge lies in minimizing the run-time overhead of the tool. TaintTrace uses a number of techniques such as direct memory mapping to optimize performance. In this paper, we demonstrate that TaintTrace is effective in protecting against various attacks while maintaining a modest slowdown of 5.5 times, offering significant improvements over similar tools.