Precision-tuned runtime monitoring
AssigneeInternational Business Machines Corporation
InventorsPaul Ionescu, Iosif V. Onut, Omer Tripp
Life of this patent
Estimating the term…
Abstract
Preliminary program analysis of an executable may be performed. A security vulnerability level of a portion of the executable may be determined based on the preliminary program analysis. The security vulnerability level of the portion may be compared to a security vulnerability threshold. The precision of runtime monitoring of the portion may be tuned based on the comparison.
Claims19
A method comprising:
- performing, by a processor, preliminary program analysis of an executable;
- determining, by the processor and based on the preliminary program analysis, a security vulnerability level of a portion of the executable;
- comparing, by the processor, the security vulnerability level of the portion to a security vulnerability threshold;
- and
- tuning, by the processor, the precision of runtime monitoring of the portion based the comparing, wherein the tuning occurs when the executable is executed.
A system comprising:
- a processor;
- and
- a memory in communication with the processor, the memory containing program instructions that, when executed by the processor, are configured to cause the processor to perform a method, the method comprising:
- performing, by a processor, preliminary program analysis of an executable wherein the preliminary program analysis is shape analysis;
- determining, by the processor and based on the preliminary program analysis, a security vulnerability level of a portion of the executable;
- comparing, by the processor, the security vulnerability level of the portion to a security vulnerability threshold;
- and
- tuning, by the processor, the precision of runtime monitoring of the portion based the comparing.
A computer program product, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a computer to cause the computer to:
- perform, by a processor, preliminary program analysis of an executable, wherein the preliminary program analysis is taint analysis that is restricted to non-immutable variables;
- determine, by the processor and based on the preliminary program analysis, a security vulnerability level of a portion of the executable;
- compare, by the processor, the security vulnerability level of the portion to a security vulnerability threshold;
- and
- tune, by the processor, the precision of runtime monitoring of the portion based the comparing.
Dependencies are inferred from the claim text.