Change search
ReferencesLink to record
Permanent link

Direct link
Development of a prototype taint tracing tool for security and other purposes
Linköping University, Department of Computer and Information Science. Linköping University, The Institute of Technology.
2012 (English)Independent thesis Advanced level (degree of Master (Two Years)), 20 credits / 30 HE creditsStudent thesis
Abstract [en]

In recent years there has been an increasing interest in dynamic taint tracing of compiled software as a powerful analysis method for security and other purposes. Most existing approaches are highly application specific and tends to sacrifice precision in favor of performance. In this thesis project a generic taint tracing tool has been developed that can deliver high precision taint information. By allowing an arbitrary number of taint labels to be stored for every tainted byte, accurate taint propagation can be achieved for values that are derived from multiple input bytes. The tool has been developed for x86 Linux systems using the dynamic binary instrumentation framework Valgrind.

The basic theory of taint tracing and multi-label taint propagation is discussed, as well as the main concepts of implementing a taint tracing tool using dynamic binary instrumentation. The impact of multi-label taint propagation on performance and precision is evaluated. While multi-label taint propagation has a considerable impact on performance, experiments carried out using the tool show that large amounts of taint information is lost with approximate methods using only one label per tainted byte.

Place, publisher, year, edition, pages
2012. , 34 p.
Keyword [en]
dynamic taint tracing, dynamic taint analysis, security, binary analysis, Valgrind, dynamic binary instrumentation
National Category
Computer Science
URN: urn:nbn:se:liu:diva-75363ISRN: LIU-IDA/LITH-EX-A--12/005--SEOAI: diva2:506238
Subject / course
Master's programme in Computer Science
2012-01-31, Muhammad al-Khwarizmi, Campus Valla, LiU, Linköping, 10:15 (English)
Available from: 2012-03-02 Created: 2012-02-28 Last updated: 2012-03-02Bibliographically approved

Open Access in DiVA

Masters_Thesis_Ulf_Kargen(1295 kB)886 downloads
File information
File name FULLTEXT01.pdfFile size 1295 kBChecksum SHA-512
Type fulltextMimetype application/pdf

Search in DiVA

By author/editor
Kargén, Ulf
By organisation
Department of Computer and Information ScienceThe Institute of Technology
Computer Science

Search outside of DiVA

GoogleGoogle Scholar
Total: 886 downloads
The number of downloads is the sum of all downloads of full texts. It may include eg previous versions that are now no longer available

Total: 274 hits
ReferencesLink to record
Permanent link

Direct link