| 本文已被：浏览 3804次 下载 6332次 |
码上扫一扫！ |
|
|
| 基于即时编译的动态污点跟踪优化 |
|
吴泽智1,2, 陈性元1,2, 杨智1,3, 杜学绘1,3
|
|
1.解放军信息工程大学 三院, 河南 郑州 450001;2.密码科学技术国家重点实验室(北京信息科学技术研究院), 北京 100094;3.河南省信息安全重点实验室(解放军信息工程大学), 河南 郑州 450001
|
|
| 摘要: |
| 动态污点跟踪技术展现了在移动隐私保护方面的强大功能，但存在系统性能较低问题.提出了一种基于即时编译的动态污点传播优化方法.首先，将程序逻辑精确抽象为污点传播逻辑，简化污点传播分析复杂性；然后，提出了一个污点传播框架，并证明了在该框架下污点传播分析的正确性和有效性；最后，采用消除、替换和移动等方法将冗余低效的污点传播代码转化为高效等价的污点传播代码.实验结果表明，经过优化后，单条热路径的污点传播代码节省了38%的内存占用和指令执行时间，系统整体性能平均提升了6.8%. |
| 关键词: 安卓 隐私安全 动态污点跟踪 即时编译器 污点传播优化 |
| DOI：10.13328/j.cnki.jos.005126 |
| 分类号: |
| 基金项目:国家自然科学基金（61402437）；国家高技术研究发展计划（863）（2015AA016006，2012AA012704） |
|
| Dynamic Taint Tracking Optimization on Just-in-Time Compilation |
|
WU Ze-Zhi1,2, CHEN Xing-Yuan1,2, YANG Zhi1,3, DU Xue-Hui1,3
|
|
1.Third College, PLA Information Engineering University, Zhengzhou 450001, China;2.State Key Laboratory of Cryptology(Beijing Academy of Information Science and Technology), Beijing 100094, China;3.He'nan Province Key Laboratory of Information Security(PLA Information Engineering University), Zhengzhou 450001, China
|
| Abstract: |
| Despite the demonstrated usefulness of dynamic taint tracking techniques in mobile privacy security, poor performance attained by prototypes is a big problem. A novel optimization methodology for dynamic taint tracking based on just-in-time compilation is presented. First, the taint propagation logic is separated from the program logic precisely to simplifying the complexity of the taint propagation analysis. Then, a taint propagation framework is proposed and the correctness of the taint propagation analysis is proved..Finally, redundant and inefficient taint propagation codes are transferred to efficient and equivalent codes by adopting the methods of eliminating, replacing and moving. Experimental results show that 38% of memory usage and the time of execution of taint tracking instructions are saved for every single hot trace, and on average the performance of dynamic taint tracking system is improved 6.8%. |
| Key words: Android privacy security dynamic taint tracking just-in-time compiler taint propagation optimization |
