CAJ | 학술논문

针对当前污点分析工具不能兼顾速度和精确度的缺陷，研究并实现一种粗细粒度结合的二进制代码动态污点分析方法。对比粗粒度污点分析和细粒度污点分析的实现过程，提出两者结合的新型分析框架。预先在陑执行粗粒度污点分析以筛选有效指令，之后离陑执行细粒度污点分析以计算污点信息。根据粒度的差异分别建立粗细粒度污点数据的引入标记方法，制定粗细粒度条件下的数据流和控制流传播策略，设计离陑轨迹记录结构作为粗细粒度污点分析的传递文件。在原型系统上的测试结果表明，该方法通过在陑粗粒度模式保证了污点分析信息采集的快速性，同时采用离陑细粒度模式以合理的时间消耗提升了污点分析的精确度。
침대당전오점분석공구불능겸고속도화정학도적결함，연구병실현일충조세립도결합적이진제대마동태오점분석방법。대비조립도오점분석화세립도오점분석적실현과정，제출량자결합적신형분석광가。예선재이집행조립도오점분석이사선유효지령，지후리이집행세립도오점분석이계산오점신식。근거립도적차이분별건립조세립도오점수거적인입표기방법，제정조세립도조건하적수거류화공제류전파책략，설계리이궤적기록결구작위조세립도오점분석적전체문건。재원형계통상적측시결과표명，해방법통과재이조립도모식보증료오점분석신식채집적쾌속성，동시채용리이세립도모식이합리적시간소모제승료오점분석적정학도。
Combination of coarse-grained and fine-grained Dynamic Taint Analysis(DTA) is developed to take speed and accuracy both into account. By comparing the realization process of coarse-grained DTA and fine-grained DTA, this paper proposes a new analysis framework. It executes online coarse-grained DTA to filter useful instruction, uses offline fine-grained DTA to calculate taint information. Coarse-grained and fine-grained taint mark methods are established respectively by comparing the difference of taint analysis. Data-flow property strategy and control-flow property strategy are developed under the condition of coarse-grained DTA and fine-grained DTA. As a transfer file, offline track record structure is designed to provide necessary information for fine-grained analysis. A prototype system is implemented and the experimental result proves that this method can ensure the rapid collection of taint information through online coarse-grained mode, and use offline fine-grained mode to improve the accuracy with accepted time consumption.