TaintTrace is a high performance flow tracing tool that protects systems against security exploits. It is based on dynamic execution binary rewriting empowering our tool with fine-grained monitoring of system activities such as the tracking of the usage and propagation of data originated from the network. The challenge lies in minimizing the run-time overhead of the tool. TaintTrace uses a number of techniques such as direct memory mapping to optimize performance. In this paper, we demonstrate that TaintTrace is effective in protecting against various attacks while maintaining a modest slowdown of 5.5 times, offering significant improvements over similar tools.
Citation:
Winnie Cheng, Qin Zhao, Bei Yu, Scott Hiroshige, "TaintTrace: Efficient Flow Tracing with Dynamic Binary Rewriting," iscc, pp.749-754, 11th IEEE Symposium on Computers and Communications (ISCC'06), 2006