NDLI: Effective memory protection using dynamic tainting

Please wait, while we are loading the content...

Exploring the neighborhood with dora to expedite software maintenance

Diconic addition of failsafe fault-tolerance

Automatic code stylizing

Combined static and dynamic mutability analysis

Directed test generation using symbolic grammars

An aspect-oriented weaving mechanism based on component and connector architecture

An automated model-based debugging approach

Parseweb: a programmer assistant for reusing open source code on the web

Feature location via information retrieval based filtering of a single scenario execution trace

Finding errors in components that exchange xml data

An automated approach to monitoring and diagnosing requirements

Testing concurrent programs using value schedules

Automated gui testing guided by usage profiles

Synthesizing client load models for performance engineering via web crawling

Towards automated consistency checks of product line requirements specifications

CodeGenie: using test-cases to search and reuse source code

Adaptation hiding modularity

Concolic testing

Empirical research methods for software engineering

Toward automated software development

Netstub: a framework for verification of distributed java applications

Ensuring consistency in long running transactions

Keyword programming in java

Sequential circuits for program analysis

Nighthawk: a two-level genetic-random unit test data generator

Towards automatic model synchronization from model transformations

Context-aware statistical debugging: from bug predictors to faulty control flow paths

Automatic extraction of framework-specific models from framework-based application code

Clustering support for automated tracing

A dynamic birthmark for java

The business case for automated software engineering

Effective random testing of concurrent programs

Efficiently monitoring data-flow test coverage

Synthesis of test purpose directed reactive planning tester for nondeterministic systems

Automated detection of api refactorings in libraries

Decor: a tool for the detection of design defects

Automating the identification of variability realisation techniques from feature models

Tutorial on JML, the java modeling language

Software reuse and evolution with generative techniques

Specifying and verifying software

Modeling bug report quality

Assertion-based repair of complex data structures

Towards supporting awareness of indirect conflicts across software configuration management workspaces

Residual dynamic typestate analysis exploiting static analysis: results to reformulate and reduce the cost of dynamic analysis

Object ownership profiling: a technique for finding and fixing memory leaks

Pallino: automation to support regression test selection for cots-based applications

Inferring structural patterns for concern traceability in evolving software

Effective memory protection using dynamic tainting

Improving evolutionary class testing in the presence of non-public methods

DESERT: a decentralized monitoring tool generator

Improving change prediction with fine-grained source code mining

Meta tools for implementing domain specific visual languages

The embarrassing truth about software automation and what should be done about it

Behavioral adaptation of component compositions based on process algebra encodings

Formal specification generator for KAOS: model transformation approach to generate formal specifications from KAOS requirements models

Using information retrieval to support design of incremental change of software

Rosetta: language support for system-level design

Scalable automatic test data generation from modeling diagrams

A buffer overflow benchmark for software model checkers

Integrated tool support for software product line engineering

Using traceability to support model-based regression testing

Checking threat modeling data flow diagrams for implementation conformance and security

Mastering combinatorial explosion with the tobias-2 test generator

Coevolving programs and unit tests from their specification

Smart: a tool for application reference testing

Combining environment generation and slicing for modular software model checking

Test suite reduction and prioritization with call trees

Covering array sampling of input event sequences for automated gui testing

The eureka tool for software model checking

Direct-dependency-based software compatibility testing

Tool support for the compile-time execution structure of object-oriented programs with ownership annotations

Driving the selection of cots components on the basis of system requirements

Tools for model-based security engineering: models vs. code

Efficient unit test case minimization

UMLtoCSP: a tool for the formal verification of UML/OCL models using constraint programming

An energy consumption framework for distributed java-based systems

Visualizing clone detection results

Evacon: a framework for integrating evolutionary and concolic testing for object-oriented programs

Extracting rights and obligations from regulations: toward a tool-supported process

Extraction of bug localization benchmarks from history

Feature interaction analysis: a maintenance perspective

A framework and tool supports for testing modularity of software design

Improving uml profile design practices by leveraging conceptual domain models

An infrastructure for autonomic system development: the selflet approach

Iterative model-driven development of adaptable service-based applications

An approach to mining call-usage patternswith syntactic context

Mining concepts from code with probabilistic topic models

Mining modal scenario-based specifications from execution traces of reactive systems

Model-driven derivation of product architectures

Modular and generic programming with interpreterlib

Reducing irrelevant trace variations

Rteq: modeling and validating infinite-state hard-real-time systems

IMP: a meta-tooling platform for creating language-specific ides in eclipse

Scheduling of conflicting refactorings to promote quality improvement

An evaluation scheme of adaptive configuration techniques

Assisting potentially-repetitive small-scale changes via semi-automated heuristic search

Model checking concurrent linux device drivers

Test automation for kernel code and disk arrays with virtual devices

Towards leveraging model transformation to support model-based testing

Unit testing concurrent software

Validating system properties exhibited in execution traces

Verifying C++ with STL containers via predicate abstraction

Effective memory protection using dynamic tainting

Content Provider	ACM Digital Library
Author	Prvulovic, Milos Doudalis, Ioannis Clause, James Orso, Alessandro
Abstract	Programs written in languages that provide direct access tomemory through pointers often contain memory-related faults, which may cause non-deterministic failures and even security vulnerabilities. In this paper, we present a new technique based on dynamic tainting for protecting programs from illegal memory accesses. When memory is allocated, at runtime, our technique taints both the memory and the corresponding pointer using the same taint mark. Taint marks are then suitably propagated while the program executes and are checked every time a memory address m is accessed through a pointer p; if the taint marks associated with mand p differ, the execution is stopped and the illegalaccess is reported. To allow for a low-overhead, hardware-assisted implementation of the approach, we make several key technical and engineering decisions in the definition of our technique. In particular, we use a configurable, low number of reusable taint marks instead of a unique mark for each area of memory allocated, which reduces the overhead of the approach without limiting its flexibility and ability to target most memory-related faults and attacks known to date. We also define the technique at the binary level, which lets us handle the (very) common case of applications that use third-party libraries whose source code is unavailable. To investigate the effectiveness and practicality of our approach, we implemented it for heap-allocated memory and performed a preliminary empirical study on a set of programs. Our results show that (1) our technique can identify a large class of memory-related faults, even when using only two unique taint marks, and (2)a hardware-assisted implementation of the technique could achieve overhead in the single digits.
Starting Page	284
Ending Page	292
Page Count	9
File Format	PDF
ISBN	9781595938824
DOI	10.1145/1321631.1321673
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2007-11-05
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Dynamic tainting Hardware support Illegal memory accesses
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in