3 ms·
There's an entire research field dedicated to the information flow control which could solve just that (if it were actually used). In my research team, we used
by lgeorget 8y ago
There's an entire research field dedicated to the information flow control which could solve just that (if it were actually used).
In my research team, we used a tainting tracing mechanism to understand the behavior of malware. Basically, we installed a malware on a clean phone and we then traced all information flow originating from the APK to processes, to files, to sockets, etc. It helped reverse-engineering the malware.
- 0db532a0 8y agoAny interesting links to papers?
- lgeorget 8y agoThere's the work by Myers and Liskov which is quite central to the whole field: https://dl.acm.org/citation.cfm?id=266669 https://dl.acm.org/citation.cfm?id=266669, there's Flume: https://dl.acm.org/citation.cfm?id=1294293 https://dl.acm.org/citation.cfm?id=1294293, DStar https://www.usenix.org/event/nsdi08/tech/full_papers/zeldovich/zeldovich.pdf.. https://www.usenix.org/event/nsdi08/tech/full_papers/zeldovi.... More recently, on Android: https://www.usenix.org/system/files/conference/usenixsecurity16/sec16_paper_nadkarni.pdf https://www.usenix.org/system/files/conference/usenixsecurit.... And this (disclaimer: I'm the main author): https://link.springer.com/chapter/10.1007/978-3-319-66197-1_1 https://link.springer.com/chapter/10.1007/978-3-319-66197-1_....
- 0db532a0 8y agoThanks.
- TeMPOraL 8y agoI'd love something like this on program level. Given contents of a variable, I'd like to know where they came from - which pieces of code contributed to the result. I'd also love to be able to mark a piece of data, and see what code touched it or derived new data from it. A programming equivalent of injecting radioisotopes into the body.
- saagarjha 8y agoI’d suggest looking into taint analysis tools, though those are usually aimed more at finding things like unsanitized input ending up in a call to system.