Multi-semantic dynamic taint analysis method

Abstract

The invention discloses a multi-semantic dynamic taint analysis method. The method comprises the steps of 1) setting a unique taint semantic type for each type of to-be-tracked semantic data; performing configuration in a one-time dynamic taint analysis process to simultaneously track various semantic information data; 2) according to each taint semantic type, monitoring whether a function of generating the semantic information data of the taint semantic type is called or not in a program running process; if yes, judging that a corresponding taint source exists, and performing recording; 3) according to the monitored semantic information of each instruction and a taint state of an operand, performing taint spread calculation, and recording a calculation result to a shadow memory; and 4) after the spread calculation, judging whether an instruction executed by a program is a sensitive instruction or not according to a preset program sensitive instruction set in the existing taint semantic type, and if yes, performing taint detection to determine whether a taint of the corresponding type exists or not in the position of the instruction. According to the method, the analysis efficiency of a dynamic taint spread method is improved.

Description

technical field [0001] The invention belongs to the technical field of computers, and in particular relates to a multi-semantic dynamic stain analysis method. Background technique [0002] Dynamic Taint Analysis (DTA) technology, from the basic principle, mainly tracks the processing logic of external untrustworthy data inside the program, and discovers the content of tainted data that may be hidden in sensitive locations of the program through the rules of taint diffusion. Finally, this mechanism is used to solve related problems in program security analysis, such as malicious code detection, software vulnerability mining, and sensitive data protection. After years of development, DTA technology has become an important method in the field of software security analysis. [0003] According to relevant statistics, from 2004 to 2015, there were more than one hundred research results related to dynamic taint propagation. Among them, the TaintBochs system proposed by J. Chow of...

AI Technical Summary

Problems solved by technology

[0010] Aiming at the problem of single semantics in the existing DTA technology, the purpose of the present invention is to provide a multi-semantic dynamic taint analysis method, which uses different taint types to indicate taint data with different semantics in the program, and sets the taint propagation rules for each type and the default propagation rules, and then the multi-semantic taint propagation process can be completed through one analysis

Images