Dynamic Taint Analysis for Automatic Detection, Analysis, and Signature Generation of Exploits on Commodity Software

摘要: Software vulnerabilities have had a devastating effect on the Internet. Worms such as CodeRed and Slammer can compromise hundreds of thousands hosts within hours or even minutes, cause millions dollars damage [26, 43]. To successfully combat these fast automatic Internet attacks, we need attack detection filtering mechanisms. In this paper propose dynamic taint analysis for overwrite which include most types exploits. This approach does not source code special compilation monitored program, hence works commodity software. demonstrate idea, implemented TaintCheck, mechanism that perform by performing binary rewriting at run time. We show TaintCheck reliably detects found produced no false positives any many different programs tested. Further, describe how could improve signature generation in