CSR-AES-RCS: Scalable and Efficient Dynamic Information Flow Tracking in Multithreaded Programs

CSR-AES-RCS：多线程程序中可扩展且高效的动态信息流跟踪

• 批准号: 0720516
• 负责人: Xiangyu Zhang
• 金额: $ 10万
• 依托单位: Purdue University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2007
• 资助国家: 美国
• 起止时间: 2007-09-01 至 2009-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0720516&HistoricalAwards=false
• 关键词: CSR; AES; RCS; Scalable; Efficient

This project is aimed at developing scalable as well as highly efficient techniques for performing Dynamic Information Flow Tracking (DIFT) in multithreaded programs.The approach being developed is based upon dynamic instrumention of binaries to perform information flow tracking so that the application source code is not required and applications involving dynamically generated code can be handled. For achieving scalability, a novel strategy based upon the integration of checkpointing logging with fine-grained tracing is being used. Initially the program is executed with logging turned on. When DIFT needs to be performed, the execution of relevant execution intervals is replayed and fine-grained tracing is selectively performed.For achieving further efficiency, idle cores on a multicore processor are being used.Dynamically, a monitoring thread is generated by analyzing the application binary and the monitoring thread and the application execute concurrently on different cores.By achieving scalability and efficiency, the developed techniques can be applied to realistic programs such as server programs. The DIFT techniques are being evaluated in context of following applications: (debugging) bug location and avoidance; (security) software attack detection and location of vulnerability; and (data validation) maintaining lineage of scientific data.

该项目旨在开发可扩展且高效的技术，用于在多线程程序中执行动态信息流跟踪（DIFT）。正在开发的方法基于二进制文件的动态检测来执行信息流跟踪，以便应用程序源代码不可以处理需要的和涉及动态生成代码的应用程序。为了实现可扩展性，正在使用一种基于检查点日志记录与细粒度跟踪集成的新颖策略。最初，程序在日志记录打开的情况下执行。当需要执行DIFT时，会重放相关执行间隔的执行，并有选择地执行细粒度跟踪。为了进一步提高效率，正在使用多核处理器上的空闲核心。通过分析应用程序动态地生成监控线程二进制文件和监控线程以及应用程序在不同的内核上同时执行。通过实现可扩展性和效率，所开发的技术可以应用于诸如服务器程序之类的实际程序。 DIFT 技术正在以下应用程序中进行评估：（调试）错误定位和避免； （安全）软件攻击检测和漏洞定位； （数据验证）维护科学数据的谱系。