Titre :

DITTANY: Strength-Based Dynamic Information Flow Analysis Tool for x86 Binaries

Auteur(s) :

Ghandour, Walid [Auteur]
Self-adaptation for distributed services and large software systems [SPIRALS]
Maurice, Clementine [Auteur]
Self-adaptation for distributed services and large software systems [SPIRALS]

Titre de la manifestation scientifique :

BAR 2022 - Workshop on Binary Analysis Research

Ville :

San Diego

Pays :

Etats-Unis d'Amérique

Date de début de la manifestation scientifique :

2022-04-24

Mot(s)-clé(s) en anglais :

dynamic information flow analysis
dynamic slicing
information flow strength
data value prediction
indirect branch prediction
binary analysis

Discipline(s) HAL :

Informatique [cs]/Cryptographie et sécurité [cs.CR]

Résumé en anglais : [en]

Dynamic dependence analysis monitors information flow between instructions in a program at runtime. Strengthbased dynamic dependence analysis quantifies the strength of each dependence chain by a measure computed based on ...
Lire la suite >Dynamic dependence analysis monitors information flow between instructions in a program at runtime. Strengthbased dynamic dependence analysis quantifies the strength of each dependence chain by a measure computed based on the values induced at the source and target of the chain. To the best of our knowledge, there is currently no tool available that implements strength-based dynamic information flow analysis for x86. This paper presents DITTANY, tool support for strength-based dynamic dependence analysis and experimental evidence of its effectiveness on the x86 platform. It involves two main components: 1) a Pin-based profiler that identifies dynamic dependences in a binary executable and records the associated values induced at their sources and targets, and 2) an analysis tool that computes the strengths of the identified dependences using information theoretic and statistical metrics applied on their associated values. We also study the relation between dynamic dependences and measurable information flow, and the usage of zero strength flows to enhance performance. DITTANY is a building block that can be used in different contexts. We show its usage in data value and indirect branch predictions. Future work will use it in countermeasures against transient execution attacks and in the context of approximate computing.Lire moins >

Langue :

Anglais

Comité de lecture :

Oui

Audience :

Internationale

Vulgarisation :

Non

Projet ANR :

ARCHI-SEC: Sécurité au niveau des micro-architectures

Collections :

• Centre de Recherche en Informatique, Signal et Automatique de Lille (CRIStAL) - UMR 9189

Source :

Harvested from HAL