Updating taint tags based on runtime behavior profiles
AssigneeInternational Business Machines Corporation
InventorsRoee Hay, Omer Tripp
Life of this patent
Estimating the term…
Abstract
An example system includes a processor to receive an application to be instrumented. The processor is to also instrument the application based on a baseline taint tracking scheme to generate an instrumented application including taint tags. The processor is also to execute the instrumented application and generate a profile of runtime behavior of the application. The processor is to modify the baseline tracking scheme based on the profile to generate an updated taint tracking scheme.
Claims20
A system, comprising a processor to:
- receive an application to be instrumented;
- instrument the application based on a baseline taint tracking scheme to generate an instrumented application comprising taint tags;
- execute the instrumented application to generate a profile of runtime behavior of the application;
- and
- modify the baseline taint tracking scheme to add or remove taint tags based on the profile to generate an updated taint tracking scheme.
A computer-implemented method, comprising:
- receiving, via a processor, an application to be instrumented;
- instrumenting, via the processor, the application based on a baseline taint tracking scheme to generate an instrumented application comprising taint tags;
- executing, via the processor, the instrumented application to generate a profile of runtime behavior of the application;
- and
- modifying, via the processor, the baseline taint tracking scheme to add or remove taint tags based on the profile to generate an updated taint tracking scheme.
A computer program product for updating taint tags based on runtime behavior profiles, the computer program product comprising a computer-readable storage medium having program code embodied therewith, wherein the computer-readable storage medium is not a transitory signal per se, the program code executable by a processor to cause the processor to:
- receive an application to be instrumented;
- instrument the application based on a baseline taint tracking scheme to generate an instrumented application comprising taint tags;
- execute the instrumented application to generate a profile of runtime behavior of the application;
- modify the baseline taint tracking scheme to add or remove taint tags based on the profile to generate an updated taint tracking scheme;
- instrument the application using the updated taint tracking scheme to generate an updated instrumented application;
- and
- execute the updated instrument application.
Dependencies are inferred from the claim text.