Re: [DynInst_API:] About Static/Dynamic Taint analysis using Dyninst

[Bill Williams <bill@xxxxxxxxxxx>]

I'm not aware of any taint checkers built with Dyninst that are publicly available, but others on the list may know of some.

The tools to perform this analysis are of course present; dataflowAPI provides an interface for forward and backward slicing, which should be more than sufficient to implement static taint analysis. Dynamic taint analysis, depending on its specific implementation, could use many different parts of the Dyninst tool set; if you can be more specific about the analysis you have in mind I can provide better guidance.

--bw

________________________________________
From: Dyninst-api <dyninst-api-bounces@xxxxxxxxxxx> on behalf of Sazzadur Rahaman <sazzad14@xxxxxx>
Sent: Friday, February 10, 2017 12:49 PM
To: dyninst-api@xxxxxxxxxxx
Subject: [DynInst_API:] About Static/Dynamic Taint analysis using Dyninst

Hi All,

I found the Dyninst APIs pretty impressive to work with!

Just a quick question.
Do you know any existing tool that can be helpful to perform static/dynamic taint analysis (like CFGTool for CFG generation). Or any guideline on how that can be done using Dyninst APIs?

Thank you very much in advance.

Best Regards,
Sazzadur Rahaman