Improving software security via runtime instruction-level taint checking

Back from 2006, published in ASPLOS.

An extension to dynamic taint-analysis to capture non-control flow data attacks.

Somewhat limited because it’s based on doing some binary analysis beforehand, but still interesting.

http://www.cs.ucf.edu/~jfkong/ASID06.pdf

Advertisement