CSR-AES-RCS: Scalable and Efficient Dynamic Information Flow Tracking in Multithreaded Programs

该项目旨在开发可扩展的高效技术，用于在多线程程序中执行动态信息流跟踪(DIFT)。正在开发的方法基于动态插装二进制文件来执行信息流跟踪，从而不需要应用程序源代码，并且可以处理涉及动态生成代码的应用程序。为了实现可伸缩性，正在使用一种基于检查点日志记录与细粒度跟踪的集成的新策略。最初，该程序在打开日志记录的情况下执行。当需要执行DIFT时，重放相关执行间隔的执行，并选择性地进行细粒度跟踪；为了进一步提高效率，利用多核处理器上的空闲内核；动态地，通过分析应用程序二进制文件生成监控线程，监控线程和应用程序在不同的核上并发执行；通过实现可伸缩性和效率，所开发的技术可以应用于服务器程序等现实程序。DIFT技术正在以下应用的背景下进行评估：(调试)错误定位和避免；(安全)软件攻击检测和漏洞定位；以及(数据验证)维护科学数据的谱系。

This project is aimed at developing scalable as well as highly efficient techniques for performing Dynamic Information Flow Tracking (DIFT) in multithreaded programs.The approach being developed is based upon dynamic instrumention of binaries to perform information flow tracking so that the application source code is not required and applications involving dynamically generated code can be handled. For achieving scalability, a novel strategy based upon the integration of checkpointing logging with fine-grained tracing is being used. Initially the program is executed with logging turned on. When DIFT needs to be performed, the execution of relevant execution intervals is replayed and fine-grained tracing is selectively performed.For achieving further efficiency, idle cores on a multicore processor are being used.Dynamically, a monitoring thread is generated by analyzing the application binary and the monitoring thread and the application execute concurrently on different cores.By achieving scalability and efficiency, the developed techniques can be applied to realistic programs such as server programs. The DIFT techniques are being evaluated in context of following applications: (debugging) bug location and avoidance; (security) software attack detection and location of vulnerability; and (data validation) maintaining lineage of scientific data.