Re: [DynInst_API:] About Static/Dynamic Taint analysis using Dyninst

[Sazzadur Rahaman <sazzad14@xxxxxx>]

Hi Williams,

Thank you very much for your quick response! I am already looking into dataflowAPI to do static taint analysis. Will let you know, if I have any further queries.

Best Regards,

Sazzadur Rahaman

On Fri, Feb 10, 2017 at 3:57 PM, Bill Williams <bill@xxxxxxxxxxx> wrote:

I'm not aware of any taint checkers built with Dyninst that are publicly available, but others on the list may know of some.

The tools to perform this analysis are of course present; dataflowAPI provides an interface for forward and backward slicing, which should be more than sufficient to implement static taint analysis. Dynamic taint analysis, depending on its specific implementation, could use many different parts of the Dyninst tool set; if you can be more specific about the analysis you have in mind I can provide better guidance.

--bw

________________________________________
From: Dyninst-api <dyninst-api-bounces@xxxxxxxxedu> on behalf of Sazzadur Rahaman <sazzad14@xxxxxx>
Sent: Friday, February 10, 2017 12:49 PM
To: dyninst-api@xxxxxxxxxxx
Subject: [DynInst_API:] About Static/Dynamic Taint analysis using Dyninst

Hi All,

I found the Dyninst APIs pretty impressive to work with!

Just a quick question.
Do you know any existing tool that can be helpful to perform static/dynamic taint analysis (like CFGTool for CFG generation). Or any guideline on how that can be done using Dyninst APIs?

Thank you very much in advance.

Best Regards,
Sazzadur Rahaman