Data stream tracking method

A data flow and operand technology, applied in the field of data flow tracking, can solve problems such as uselessness and high performance overhead, achieve high taint tracking performance, and improve the target system and user interaction experience.

Active Publication Date: 2014-04-09
HUAZHONG UNIV OF SCI & TECH
View PDF4 Cites 12 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

The implementation of the taint tracking system based on intermediate instructions is simple and straightforward, but there are a large number of useless operations, resulting in relatively high performance overhead

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Data stream tracking method
  • Data stream tracking method
  • Data stream tracking method

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0043] In order to make the object, technical solution and advantages of the present invention more clear, the present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described here are only used to explain the present invention, not to limit the present invention. In addition, the technical features involved in the various embodiments of the present invention described below may be combined with each other as long as they do not constitute a conflict with each other.

[0044] The present invention designs a set of simple taint tracking instructions for x86 instructions and taint tracking operations, and at the same time modifies the dynamic binary translation process of the emulator, and generates a dynamic binary translation process for the client operating system to generate host machine code synchronously. A set of virtual taint tracking instructions is ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a data stream tracking method. The data stream tracking method comprises the following three stages: in the first stage, customer operating system instructions are disassembled in a static mode, wherein corresponding stain spreading instructions are generated according to a static client x86 instruction, stain data spreading updating operation is conducted, and an internal storage operand physical address which can not be acquired in the static disassembling process is acquired in a dynamic execution process by adopting a shared cache; in the second stage, a host machine execution code is generated through compiling, wherein an executable code on a host machine is generated according to stain instructions in the first stage in the form of a manipulation function so as to facilitate execution of the third stage; in the third stage, a new thread of execution is opened up, wherein the stain instructions are executed and fetched one by one, and the manipulation function of the stain instructions is called. According to the data stream tracking method, stain tracking operation is separated from a simulator dynamic binary translation execution module, so that stain spreading updating based on stain semantic translation and parallelization of an x86 instruction level is realized, useless stain tracking operation is reduced, and interactive experience between a system and a user is improved.

Description

technical field [0001] The invention belongs to the field of computer security, and more specifically, the invention relates to a data flow tracking method. Background technique [0002] Data flow tracking technology is a security technology widely used in the field of information security. Use byte-level taint marks to taint low-level machine states (CPU registers, physical memory, disk blocks, etc.), intercept and analyze system instruction streams at the same time, and analyze the impact of instruction streams on taint marks to update and maintain taints mark. In order to obtain the fine-grained analysis capability required for data flow tracking, the taint tracking system needs to use dynamic binary instrumentation technology to instrument the target application or run the target system through a simulator. [0003] The taint tracking system implemented based on dynamic binary instrumentation technology is usually only suitable for instrumentation of applications at th...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Applications(China)
IPC IPC(8): G06F21/52
CPCG06F21/52
Inventor 邹德清金海袁劲枫
Owner HUAZHONG UNIV OF SCI & TECH
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products