Home

On the Deployment of Dynamic Taint Analysis for Application Communities

Hyung Chan Kim; Angelos D. Keromytis

Title:
On the Deployment of Dynamic Taint Analysis for Application Communities
Author(s):
Kim, Hyung Chan
Keromytis, Angelos D.
Date:
Type:
Articles
Department:
Computer Science
Volume:
E92-D
Permanent URL:
Book/Journal Title:
EICE Transactions on Information and Systems
Abstract:
Although software-attack detection via dynamic taint analysis (DTA) supports high coverage of program execution, it prohibitively degrades the performance of the monitored program. This letter explores the possibility of collaborative dynamic taint analysis among members of an application community (AC): instead of full monitoring for every request at every instance of the AC, each member uses DTA for some fraction of the incoming requests, thereby loosening the burden of heavyweight monitoring. Our experimental results using a test AC based on the Apache web server show that speedy detection of worm outbreaks is feasible with application communities of medium size (i.e., 250-500).
Subject(s):
Computer science
Item views:
47
Metadata:
text | xml

In Partnership with the Center for Digital Research and Scholarship at Columbia University Libraries/Information Services | Terms of Use