CSR-AES-RCS: Scalable and Efficient Dynamic Information Flow Tracking in Multithreaded Programs

该项目旨在开发可扩展的高效技术，用于在多线程程序中执行动态信息流跟踪（DIFT）。正在开发的方法基于二进制文件的动态检测来执行信息流跟踪，因此不需要应用程序源代码，并且可以处理涉及动态生成代码的应用程序。为了实现可伸缩性，使用了一种基于检查点日志与细粒度跟踪集成的新策略。最初，程序是在打开日志记录的情况下执行的。当需要执行DIFT时，将重播相关执行间隔的执行，并有选择地执行细粒度跟踪。为了获得更高的效率，多核处理器上的空闲核被使用。动态地，通过分析应用程序二进制文件生成监视线程，并且监视线程和应用程序在不同的核心上并发执行。通过实现可伸缩性和效率，所开发的技术可以应用于实际的程序，如服务器程序。在以下应用环境中对DIFT技术进行评估：（调试）错误定位和避免；（安全）软件攻击检测及漏洞定位；（数据验证）维护科学数据的沿袭。

This project is aimed at developing scalable as well as highly efficient techniques for performing Dynamic Information Flow Tracking (DIFT) in multithreaded programs.The approach being developed is based upon dynamic instrumention of binaries to perform information flow tracking so that the application source code is not required and applications involving dynamically generated code can be handled. For achieving scalability, a novel strategy based upon the integration of checkpointing logging with fine-grained tracing is being used. Initially the program is executed with logging turned on. When DIFT needs to be performed, the execution of relevant execution intervals is replayed and fine-grained tracing is selectively performed.For achieving further efficiency, idle cores on a multicore processor are being used.Dynamically, a monitoring thread is generated by analyzing the application binary and the monitoring thread and the application execute concurrently on different cores.By achieving scalability and efficiency, the developed techniques can be applied to realistic programs such as server programs. The DIFT techniques are being evaluated in context of following applications: (debugging) bug location and avoidance; (security) software attack detection and location of vulnerability; and (data validation) maintaining lineage of scientific data.