Logo des Repositoriums
 

Jaint: A Framework for User-Defined Dynamic Taint-Analyses based on Dynamic Symbolic Execution of Java Programs

Kurzanzeige
dc.contributor.authorMues, Malte
dc.contributor.authorSchallau, Till
dc.contributor.authorHowar, Falk
dc.contributor.editorKoziolek, Anne
dc.contributor.editorSchaefer, Ina
dc.contributor.editorSeidl, Christoph
dc.date.accessioned2020-12-17T11:57:54Z
dc.date.available2020-12-17T11:57:54Z
dc.date.issued2021
dc.description.abstractWe summarize the paper "Jaint: A Framework for User-Defined Dynamic Taint-Analyses Based on Dynamic Symbolic Execution of Java Programs", published at the sixteenth international conference on integrated formal methods in November 2020. Reliable and scalable methods for security analyses of Java applications are an important enabler for a secure digital infrastructure. In this paper, we present a security analysis that integrates dynamic symbolic execution and dynamic multi-colored taint analysis of Java programs, combining the precision of dynamic analysis with the exhaustive exploration of symbolic execution. We implement the approach in the Jaint tool, based on Jdart, a dynamic symbolic execution engine for Java PathFinder, and evaluate its performance by comparing precision and runtimes to other research tools on the OWASP benchmark set. The paper also presents a domain-specific language for taint analyses that is more expressive than the source and sink specifications found in publicly available tools and enables precise, CWE-specific specification of undesired data flows. This summary presents Jaint’s language and the evaluation.en
dc.identifier.doi10.18420/SE2021_27
dc.identifier.isbn978-3-88579-704-3
dc.identifier.pissn1617-5468
dc.identifier.urihttps://dl.gi.de/handle/20.500.12116/34522
dc.language.isoen
dc.publisherGesellschaft für Informatik e.V.
dc.relation.ispartofSoftware Engineering 2021
dc.relation.ispartofseriesecture Notes in Informatics (LNI) - Proceedings, Volume P-310
dc.subjectDynamic Symbolic Execution
dc.subjectDomain Specific Languages
dc.subjectJava Bytecode Analysis
dc.subjectDynamic Taint Analysis
dc.titleJaint: A Framework for User-Defined Dynamic Taint-Analyses based on Dynamic Symbolic Execution of Java Programsen
dc.typeText/ConferencePaper
gi.citation.endPage78
gi.citation.publisherPlaceBonn
gi.citation.startPage77
gi.conference.date22.-26. Februar 2021
gi.conference.locationBraunschweig/Virtuell

Dateien

Originalbündel
1 - 1 von 1
Vorschaubild nicht verfügbar
Name:
B1-26.pdf
Größe:
221.04 KB
Format:
Adobe Portable Document Format
Herunterladen

Sammlungen

P310 - Software Engineering 2021