SandTrap

Ali Razeen, Alvin R. Lebeck, David H. Liu, Alexander Meijer, Valentin Pistol, Landon P. Cox
<span title="">2018</span> <i title="ACM Press"> <a target="_blank" rel="noopener" href="https://fatcat.wiki/container/njcatvvpwrbnzgx73xjukq6ene" style="color: black;">Proceedings of the 16th Annual International Conference on Mobile Systems, Applications, and Services - MobiSys &#39;18</a> </i> &nbsp;
The most promising way to improve the performance of dynamic information-flow tracking (DIFT) for machine code is to only track instructions when they process tainted data. Unfortunately, prior approaches to on-demand DIFT are a poor match for modern mobile platforms that rely heavily on parallelism to provide good interactivity in the face of computationally intensive tasks like image processing. The main shortcoming of these prior efforts is that they cannot support an arbitrary mix of
more &raquo; ... l threads due to the limitations of page protections. In this paper, we identify parallel permissions as a key requirement for multithreaded, on-demand native DIFT, and we describe the design and implementation of a system called SandTrap that embodies this approach. Using our prototype implementation, we demonstrate that SandTrap's native DIFT overhead is proportional to the amount of tainted data that native code processes. For example, in the photo-sharing app Instagram, SandTrap's performance is close to baseline (1x) when the app does not access tainted data. When it does, SandTrap imposes a slowdown comparable to prior DIFT systems (∼8x). CCS CONCEPTS • Security and privacy → Information flow control; • Humancentered computing → Mobile computing; • Software and its engineering → Virtual memory; Multithreading; KEYWORDS parallel memory permissions, dynamic information-flow tracking, native code ACM Reference Format:
<span class="external-identifiers"> <a target="_blank" rel="external noopener noreferrer" href="https://doi.org/10.1145/3210240.3210321">doi:10.1145/3210240.3210321</a> <a target="_blank" rel="external noopener" href="https://dblp.org/rec/conf/mobisys/RazeenLLMPC18.html">dblp:conf/mobisys/RazeenLLMPC18</a> <a target="_blank" rel="external noopener" href="https://fatcat.wiki/release/aos4bkavc5h6tj73ygcuc4wvse">fatcat:aos4bkavc5h6tj73ygcuc4wvse</a> </span>
<a target="_blank" rel="noopener" href="https://web.archive.org/web/20200322233253/https://www.microsoft.com/en-us/research/uploads/prod/2018/05/sandtrap-mobisys18.pdf" title="fulltext PDF download" data-goatcounter-click="serp-fulltext" data-goatcounter-title="serp-fulltext"> <button class="ui simple right pointing dropdown compact black labeled icon button serp-button"> <i class="icon ia-icon"></i> Web Archive [PDF] <div class="menu fulltext-thumbnail"> <img src="https://blobs.fatcat.wiki/thumbnail/pdf/cd/2e/cd2ea51bb1e2f218cfe72ab7b0cdfd0fdcdb1b87.180px.jpg" alt="fulltext thumbnail" loading="lazy"> </div> </button> </a> <a target="_blank" rel="external noopener noreferrer" href="https://doi.org/10.1145/3210240.3210321"> <button class="ui left aligned compact blue labeled icon button serp-button"> <i class="external alternate icon"></i> acm.org </button> </a>