System and method for dynamic analysis tracking object associations for application dataflow

A non-transitory machine-readable medium carrying one or more sequences of instructions for dynamic analysis tracking object associations for application dataflow, which instructions, when executed by one or more processors, cause the one or more processors to carry out the steps of:

• creating a first wrapper object that points to a data object received from a data source;
• creating a source tracking object for the first wrapper object;
• recording information associated with the data source into the source tracking object;
• creating a copy of the first wrapper object for a first tracking event in an application program;
• creating a first flow tracking object for the first tracking event;
• recording information associated with the first tracking event into the first flow tracking object as the first tracking event processes the copy of the first wrapper object;
• creating a second wrapper object for a second tracking event in the application program;
• creating a second flow tracking object for the second tracking event;
• recording information associated with the second tracking event into the second flow tracking object as the second tracking event processes the second wrapper object;
• associating the first flow tracking object with the second flow tracking object in response to a field retrieval of the copy of the first wrapper object from the second wrapper object;
• outputting the copy of the first wrapper object to a data sink for the application program;
• creating a sink tracking object for the data sink;
• recording information associated with the data sink into the sink tracking object;
• and outputting the source tracking object, the first flow tracking object, the associated second flow tracking object, and the sink tracking object as dynamic analysis of dataflow in the application program.

A method for dynamic analysis tracking object associations for application dataflow, the method comprising:

• creating, by a computing system having at least one processor, a first wrapper object that points to a data object received from a data source;
• creating, by the computing system, a source tracking object for the first wrapper object;
• recording, by the computing system, information associated with the data source into the source tracking object;
• creating, by the computing system, a copy of the first wrapper object for a first tracking event in an application program;
• creating, by the computing system, a first flow tracking object for the first tracking event;
• recording, by the computing system, information associated with the first tracking event into the first flow tracking object as the first tracking event processes the copy of the first wrapper object;
• creating, by the computing system, a second wrapper object for a second tracking event in the application program;
• creating, by the computing system, a second flow tracking object for the second tracking event;
• recording, by the computing system, information associated with the second tracking event into the second flow tracking object as the second tracking event processes the second wrapper object;
• associating, by the computing system, the first flow tracking object with the second flow tracking object in response to a field retrieval of the copy of the first wrapper object from the second wrapper object;
• outputting, by the computing system, the copy of the first wrapper object to a data sink for the application program;
• creating, by the computing system, a sink tracking object for the data sink;
• recording, by the computing system, information associated with the data sink into the sink tracking object;
• and
• outputting, by the computing system, the source tracking object, the first flow tracking object, the associated second flow tracking object, and the sink tracking object as dynamic analysis of dataflow in the application program.

A method for transmitting code for dynamic analysis tracking object associations for application dataflow, the method comprising:

• transmitting code, by at least one processor, to create a first wrapper object that points to a data object received from a data source;
• transmitting code, by the at least one processor, to create a source tracking object for the first wrapper object;
• transmitting code, by the at least one processor, to record information associated with the data source into the source tracking object;
• transmitting code, by the at least one processor, to create a copy of the first wrapper object for a first tracking event in an application program;
• transmitting code, by the at least one processor, to create a first flow tracking object for the first tracking event;
• transmitting code, by the at least one processor, to record information associated with the first tracking event into the first flow tracking object as the first tracking event processes the copy of the first wrapper object;
• transmitting code, by the at least one processor, to create a second wrapper object for a second tracking event in the application program;
• transmitting code, by the at least one processor, to create a second flow tracking object for the second tracking event;
• transmitting code, by the at least one processor, to record information associated with the second tracking event into the second flow tracking object as the second tracking event processes the second wrapper object;
• transmitting code, by the at least one processor, to associate the first flow tracking object with the second flow tracking object in response to a field retrieval of the copy of the first wrapper object from the second wrapper object;
• transmitting code, by the at least one processor, to output the copy of the first wrapper object to a data sink for the application program;
• transmitting code, by the at least one processor, to create a sink tracking object for the data sink;
• transmitting code, by the at least one processor, to record information associated with the data sink into the sink tracking object;
• and
• transmitting code, by the at least one processor, to output the source tracking object, the first flow tracking object, the associated second flow tracking object, and the sink tracking object as dynamic analysis of dataflow in the application program.