Understanding data lifetime via whole system simulation

By Jim Chow, Ben Pfaff, Tal Garfinkel, Kevin Christopher, Mendel Rosenblum. 2004

389 citations recorded by the source corpus.

View Paper: https://www.semanticscholar.org/paper/d41d8afb71d60b458d1702781b1725d2d9f2dd3b

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Citations in the corpus

Raksha: a flexible information flow architecture for software security (2007, methodology): “The generality of the DIFT model has led to the development of several software [4, 14, 5, 28, 13, 18, 15, 21] and hardware [24, 6, 2] implementations.”
DTA++: Dynamic Taint Analysis with Targeted Control-Flow Propagation (2011, methodology): “Our technique first diagnoses implicit flows within information-preserving transformations, where they are most likely to cause undertainting.”
LIFT: A Low-Overhead Practical Information Flow Tracking System for Detecting Security Attacks (2006, background): “Information flow tracking systems can be implemented in three different ways, including language-based approaches [18, 19, 24, 31, 32], software-only approaches either in binary level [11, 14, 34] or in source level [42], or hardware extensions [17, 36, 39].”
TaintDroid (2010, methodology): “Instruction-level instrumentation incurs 2-20 times slowdown [57, 7] in addition to the slowdown introduced”
Prospex: Protocol Specification Extraction (2009, methodology): “By using dynamic taint analysis [22]–[24], we can precisely track how the application, which " understands " the messages and implements the protocol state machine, handles input data.”
An empirical study of privacy-violating information flows in JavaScript web applications (2010, background): “Several authors have investigated the use of dynamic taint propagation and checking, using specialized hardware [27, 29], virtual machines [4], binary rewriting [22], and sourcelevel rewriting [5, 19].”
Dynamic Taint Analysis for Automatic Detection, Analysis, and SignatureGeneration of Exploits on Commodity Software (2005, background): “The tainting propagation in TaintCheck is similar to the one in [12].”
Dytan: a generic dynamic taint analysis framework (2007, background): “Chow and colleagues [3] present T AINT BOCHS, a simulator that can track tainted data through an entire system, including hardware, operating system, and applications.”
These aren't the droids you're looking for: retrofitting android to protect data from imperious applications (2011, methodology): “’s TaintBochs [6] uses DIFT to analyze the lifetime of security-critical data in”
Polyglot: automatic extraction of protocol message format using dynamic binary analysis (2007, methodology): “The execution monitor implements dynamic taint analysis [13, 14, 15, 28, 34, 35].”
BitBlaze: A New Approach to Computer Security via Binary Analysis (2008, methodology): “For example, previous approaches either operate on a single process only [17,35,38], or they cannot deal with memory swapping and disks [16, 18].”
This Paper Is Included in the Proceedings of the 12th Usenix Symposium on Operating Systems Design and Implementation (osdi '16). Ryoan: a Distributed Sandbox for Untrusted Computation on Secret Data Ryoan: a Distributed Sandbox for Untrusted Computation on Secret Data (unknown): “Ryoan labels could also be thought of as taint tracking [30] at enclavelevel granularity, with per-principal classes of taint.”