CSR-AES-RCS: Scalable and Efficient Dynamic Information Flow Tracking in Multithreaded Programs

本项目旨在开发可扩展的、高效的多线程程序动态信息流跟踪（DIFT）技术，该方法基于二进制文件的动态检测来实现信息流跟踪，从而不需要应用程序源代码，可以处理涉及动态生成代码的应用程序。为了实现可扩展性，一个新的策略的基础上集成的检查点日志与细粒度跟踪正在使用。最初，程序在日志记录打开的情况下执行。当需要执行DIFT时，重放相关执行间隔的执行，并选择性地执行细粒度跟踪。为了进一步提高效率，正在使用多核处理器上的空闲核。动态地，通过分析所述应用二进制文件来生成监视线程，并且所述监视线程和所述应用在不同的核上并发地执行。可扩展性和效率，开发的技术可以应用到现实的程序，如服务器程序。目前正在下列应用背景下评估DIFT技术：（调试）缺陷定位和避免;（安全）软件攻击检测和脆弱性定位;（数据验证）维护科学数据的谱系。

This project is aimed at developing scalable as well as highly efficient techniques for performing Dynamic Information Flow Tracking (DIFT) in multithreaded programs.The approach being developed is based upon dynamic instrumention of binaries to perform information flow tracking so that the application source code is not required and applications involving dynamically generated code can be handled. For achieving scalability, a novel strategy based upon the integration of checkpointing logging with fine-grained tracing is being used. Initially the program is executed with logging turned on. When DIFT needs to be performed, the execution of relevant execution intervals is replayed and fine-grained tracing is selectively performed.For achieving further efficiency, idle cores on a multicore processor are being used.Dynamically, a monitoring thread is generated by analyzing the application binary and the monitoring thread and the application execute concurrently on different cores.By achieving scalability and efficiency, the developed techniques can be applied to realistic programs such as server programs. The DIFT techniques are being evaluated in context of following applications: (debugging) bug location and avoidance; (security) software attack detection and location of vulnerability; and (data validation) maintaining lineage of scientific data.