Dynamic Taint Analysis for Automatic Detection, Analysis, and SignatureGeneration of Exploits on Commodity Software

No abstract is available for this paper.

• Publication year

  2005

• Venue

  Network and Distributed System Security Symposium

• Publication date

  Unknown publication date

• Fields of study

  Computer Science, Engineering

• Identifiers

  No identifiers available.

• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• The EarlyBird System for Real-time Detection of Unknown Worms

  2005influential reference
• Dynamic Taint Analysis for Automatic Detection, Analysis, and Signature Generation of Exploits on Commodity Software, Network and Distributed System Security Symposium Conference Proceedings : 2005

  2005cited by this paper
• Anomalous Payload-Based Network Intrusion Detection

  2004cited by this paper
• Understanding data lifetime via whole system simulation

  2004cited by this paper
• Secure program execution via dynamic information flow tracking

  2004cited by this paper
• Gray-box extraction of execution graphs for anomaly detection

  2004cited by this paper
• Bounds-Checking Entire Programs without Recompiling [ Extended

  2004cited by this paper
• TIED, LibsafePlus: Tools for Runtime Buffer Overflow Protection

  2004cited by this paper
• A Practical Dynamic Buffer Overflow Detector

  2004cited by this paper
• On Gray-Box Program Tracking for Anomaly Detection

  2004cited by this paper
• Side Effects Are Not Sufficient to Authenticate Software

  2004influential reference
• Automated Worm Fingerprinting

  2004cited by this paper
• Buttercup: on network-based detection of polymorphic buffer overflow vulnerabilities

  2004cited by this paper
• On the effectiveness of address-space randomization

  2004cited by this paper
• Shield: vulnerability-driven network filters for preventing known vulnerability exploits

  2004cited by this paper
• Can we contain Internet worms

  2004cited by this paper
• Improving Host Security with System Call Policies

  2003cited by this paper
• Address Obfuscation: An Efficient Approach to Combat a Broad Range of Memory Error Exploits

  2003cited by this paper
• Inside the Slammer Worm

  2003cited by this paper
• Internet quarantine: requirements for containing self-propagating code

  2003cited by this paper
• A network worm vaccine architecture

  2003cited by this paper
• Valgrind: A Program Supervision Framework

  2003influential reference
• PointGuard™: Protecting Pointers from Buffer Overflow Vulnerabilities

  2003influential reference
• Countering code-injection attacks with instruction-set randomization

  2003cited by this paper
• Run-Time Type Checking for Binary Programs

  2003cited by this paper
• Scrash: A System for Generating Secure Crash Information

  2003cited by this paper
• CCured: type-safe retrofitting of legacy code

  2002influential reference
• Secure Execution via Program Shepherding

  2002influential reference
• How to Own the Internet in Your Spare Time

  2002cited by this paper
• Mitigating buffer overflows by operating system randomization

  2002cited by this paper
• Accurate Buffer Overflow Detection via Abstract Payload Execution

  2002cited by this paper
• How to 0wn the Internet in Your Spare Time

  2002cited by this paper
• HUNTING FOR METAMORPHIC

  2001cited by this paper
• This copyright notice must be included in the reproduced paper. USENIX acknowledges all trademarks herein. Detecting Format String Vulnerabilities with Type Qualifiers

  2001cited by this paper
• FormatGuard: Automatic Protection From printf Format String Vulnerabilities

  2001cited by this paper
• Transparent Run-Time Defense Against Stack-Smashing Attacks

  2000cited by this paper
• Hardening COTS software with generic software wrappers

  1999cited by this paper
• A theory of type qualifiers

  1999cited by this paper
• MAPbox: Using Parameterized Behavior Classes to Confine Applications

  1999cited by this paper
• Bro: a system for detecting network intruders in real-time

  1998cited by this paper
• StackGuard: Automatic Adaptive Detection and Prevention of Buffer-Overflow Attacks

  1998cited by this paper
• Backwards-Compatible Bounds Checking for Arrays and Pointers in C Programs

  1997cited by this paper
• A sense of self for Unix processes

  1996cited by this paper
• A Secure Environment for Untrusted Helper Applications

  1996cited by this paper
• TRON: Process-Specific File Protection for the UNIX Operating System

  1995cited by this paper
• USENIX Association Proceedings of FAST ’ 03 : 2 nd USENIX Conference on File and Storage Technologies

  1992cited by this paper
• Dynamic program slicing

  1990cited by this paper
• Dynamic slicing of computer programs

  1990cited by this paper
• Proceedings of the 9th USENIX Security Symposium

  year unknowncited by this paper

• Silent Egress: When Implicit Prompt Injection Makes LLM Agents Leak Without a Trace

  2026cites this paper
• SoK: Knowledge is All You Need: Last Mile Delivery for Automated Provenance-based Intrusion Detection with LLMs

  2025cites this paper
• TaintEMU: Decoupling Tracking from Functional Domains for Architecture-Agnostic and Efficient Whole-System Taint Tracking

  2025cites this paper
• STAFF: Stateful Taint-Assisted Full-system Firmware Fuzzing

  2025cites this paper
• Detecting Exception-Related Behavioural Breaking Changes with UnCheckGuard

  2025cites this paper
• Multi-Phase Taint Analysis for JSON Inference in Search-Based Fuzzing

  2025cites this paper
• Effectively Detecting Software Vulnerabilities via Leveraging Features on Program Slices

  2025cites this paper
• Software Availability Protection in Cyber-Physical Systems

  2025cites this paper
• Exploring Smart Grid Vulnerability Against Intelligent Inverter Parameter Tampering Attack

  2025cites this paper
• Deep Learning Assisted Reverse Engineering: Recognizing Encryption Loops in Ransomware

  2025cites this paper
• Modern Approaches to Software Vulnerability Detection: A Survey of Machine Learning, Deep Learning, and Large Language Models

  2025cites this paper
• Dynamic Detection of Vulnerable DMA Race Conditions

  2025cites this paper
• Human-understandable explanation for software vulnerability prediction

  2025cites this paper
• CAPRA: Context-Aware patch risk assessment for detecting immature vulnerability in open-source software

  2025cites this paper
• A transformer-based framework for software vulnerability detection using attention-driven convolutional neural networks

  2025cites this paper
• RTBAS: Defending LLM Agents Against Prompt Injection and Privacy Leakage

  2025cites this paper
• An Automated Identification Method for Controllable Memory-Related Fields in Proof-of-Concept Code

  2025cites this paper
• Reverse Format of Dameng Database

  2025cites this paper
• MimicCall: Bypassing System Call Filters via Kernel Function Redundancy

  2025cites this paper
• VulTriNet: A software vulnerability detection method based on tri-channel network

  2025cites this paper
• JasLoad: Dynamically Analyzing Javascript Bytecode via a Load-Time Instrumentation Approach

  2025cites this paper
• ForeDroid: Scenario-Aware Analysis for Android Malware Detection and Explanation

  2025cites this paper
• SHERLOCK: A Deep Learning Approach To Detect Software Vulnerabilities

  2025cites this paper
• Enhancing GNSS Receiver Resilience Through Fuzz Testing: A Novel Approach to System Robustness in Avionics

  2025cites this paper
• Finding Information Leaks with Information Flow Fuzzing

  2025cites this paper
• ConfuseTaint: Exploiting Vulnerabilities to Bypass Dynamic Taint Analysis

  2025cites this paper
• Real-VulLLM: An LLM Based Assessment Framework in the Wild

  2025cites this paper
• Next Steps in Cyber Blue Team Automation—Leveraging the Power of LLMs

  2025cites this paper
• Enhanced Web Application Security Through Proactive Dead Drop Resolver Remediation

  2025cites this paper
• When AIOps Become "AI Oops": Subverting LLM-driven IT Operations via Telemetry Manipulation

  2025cites this paper
• Sagitta: Facilitating Post-Fuzzing Root Cause Analysis via Data Flow Differencing

  2025cites this paper
• JANUS: A Difference-Oriented Analyzer For Financial Centralization Risks in Smart Contracts

  2024cites this paper
• PrivacyCAT: Privacy-Aware Code Analysis at Scale

  2024cites this paper
• Challenges of Multilingual Program Specification and Analysis

  2024cites this paper
• Divide and Conquer based Symbolic Vulnerability Detection

  2024cites this paper
• VulTR: Software vulnerability detection model based on multi-layer key feature enhancement

  2024cites this paper
• eAudit: A Fast, Scalable and Deployable Audit Data Collection System*

  2024cites this paper
• An Empirical Study of Software Sanitization Locality

  2024cites this paper
• AirTaint: Making Dynamic Taint Analysis Faster and Easier

  2024cites this paper
• Detecting Malicious Behaviors in PDF Document: A Hybrid Features Detection Method on System Calls

  2024cites this paper
• WASMDYPA: Effectively Detecting WebAssembly Bugs via Dynamic Program Analysis

  2024cites this paper
• Practical Data-Only Attack Generation

  2024cites this paper
• Vulnerability Detection via Multiple-Graph-Based Code Representation

  2024cites this paper
• After the Breach: Incident Response within Enterprises

  2024cites this paper
• Code Property Graph based Cross-Domain Vulnerability Detection via Deep Fused Feature

  2024cites this paper
• Carving Out Control Code: Automated Identification of Control Software in Autopilot Systems

  2024cites this paper
• SoK: A Defense-Oriented Evaluation of Software Supply Chain Security

  2024cites this paper
• FIRE: Combining Multi-Stage Filtering with Taint Analysis for Scalable Recurring Vulnerability Detection

  2024cites this paper
• Incorporating Gradients to Rules: Towards Lightweight, Adaptive Provenance-based Intrusion Detection

  2024cites this paper
• CtChecker: A Precise, Sound and Efficient Static Analysis for Constant-Time Programming (Artifact)

  2024cites this paper
• Accurate Architectural Threat Elicitation From Source Code Through Hybrid Information Flow Analysis

  2024cites this paper
• Is It Safe to Share Your Files? An Empirical Security Analysis of Google Workspace

  2024cites this paper
• HardTaint: Production-Run Dynamic Taint Analysis via Selective Hardware Tracing

  2024cites this paper
• Dynamic Controllability Analysis for Preventing Injection Attacks

  2024cites this paper
• Everything is Good for Something: Counterexample-Guided Directed Fuzzing via Likely Invariant Inference

  2024cites this paper
• A Survey of Software Dynamic Analysis Methods

  2024cites this paper
• Faster and Better: Detecting Vulnerabilities in Linux-based IoT Firmware with Optimized Reaching Definition Analysis

  2024cites this paper
• CPMSVD: Cross-Project Multiclass Software Vulnerability Detection Via Fused Deep Feature and Domain Adaptation

  2024cites this paper
• FlowProf: Profiling Multi-threaded Programs using Information-Flow

  2024cites this paper
• SaTC: Shared-Keyword Aware Taint Checking for Detecting Bugs in Embedded Systems

  2024cites this paper
• Exploring Semantic Redundancy using Backdoor Triggers: A Complementary Insight into the Challenges Facing DNN-based Software Vulnerability Detection

  2024cites this paper
• A Survey on Cyber Threat Predictive Analysis in Cyber Supply Chain Security

  2024cites this paper
• Attention-Based API Locating for Malware Techniques

  2024cites this paper
• ZipChannel: Cache Side-Channel Vulnerabilities in Compression Algorithms

  2024cites this paper
• LuaTaint: A Static Analysis System for Web Configuration Interface Vulnerability of Internet of Things Devices

  2024cites this paper
• There Are Infinite Ways to Formulate Code: How to Mitigate the Resulting Problems for Better Software Vulnerability Detection

  2024cites this paper
• ROLoad-PMP: Securing Sensitive Operations for Kernels and Bare-Metal Firmware

  2024cites this paper
• Raft: Hardware-assisted Dynamic Information Flow Tracking for Runtime Protection on RISC-V

  2023cites this paper
• RV-CURE: A RISC-V Capability Architecture for Full Memory Safety

  2023cites this paper
• Taintmini: Detecting Flow of Sensitive Data in Mini-Programs with Static Taint Analysis

  2023cites this paper
• MirrorTaint: Practical Non-intrusive Dynamic Taint Tracking for JVM-based Microservice Systems

  2023cites this paper
• VIPER: Spotting Syscall-Guard Variables for Data-Only Attacks

  2023cites this paper
• VulDetect: A novel technique for detecting software vulnerabilities using Language Models

  2023cites this paper
• Predicting Aging-Related Bugs Using Network Analysis on Aging-Related Dependency Networks

  2023cites this paper
• podft: On Accelerating Dynamic Taint Analysis with Precise Path Optimization

  2023cites this paper
• Use of Ensemble Learning to Detect Buffer Overflow Exploitation

  2023cites this paper
• Using Infrastructure-Based Agents to Enhance Forensic Logging of Third-Party Applications

  2023cites this paper
• Action-Based Test Carving for Android Apps

  2023cites this paper
• Negative Results of Fusing Code and Documentation for Learning to Accurately Identify Sensitive Source and Sink Methods : An Application to the Android Framework for Data Leak Detection

  2023cites this paper
• autoMPI: Automated Multiple Perspective Attack Investigation With Semantics Aware Execution Partitioning

  2023cites this paper
• WASMDYPA: Effectively Detecting WebAssembly Bugs via Dynamic Program Analysis

  2023cites this paper
• On the Detection of Smart, Self-Propagating Internet Worms

  2023cites this paper
• Detection of Buffer Overflow Attacks with Memoization-based Rule Set

  2023cites this paper
• Learning to Locate and Describe Vulnerabilities

  2023cites this paper
• SecDINT: Preventing Data-oriented Attacks via Intel SGX Escorted Data Integrity

  2023cites this paper
• Secure Instruction and Data-Level Information Flow Tracking Model for RISC-V

  2023cites this paper
• Extracting Threat Intelligence From Cheat Binaries For Anti-Cheating

  2023cites this paper
• Arbiter: Bridging the Static and Dynamic Divide in Vulnerability Discovery on Binary Programs

  2022cites this paper
• AOS-RISC-V: Towards Always-On Heap Memory Safety

  2022cites this paper
• PATVD:Vulnerability Detection Based on Pre-training Techniques and Adversarial Training

  2022cites this paper
• Transformer-Based Language Models for Software Vulnerability Detection

  2022cites this paper
• RetTag: hardware-assisted return address integrity on RISC-V

  2022cites this paper
• MVDetecter: Vulnerability Primitive-based General Memory Vulnerability Detection

  2022cites this paper
• Relax the Non-Collusion Assumption for Multi-Server PIR

  2022cites this paper
• Fuzzing: A Survey for Roadmap

  2022influential citation
• Malware Visualization and Similarity via Tracking Binary Execution Path

  2022cites this paper
• A new method of software vulnerability detection based on a quantum neural network

  2022cites this paper
• nnTaint: An Optimized Dynamic Taint Analysis Method Based on Neural Network

  2022cites this paper
• Efficiently detecting concurrency bugs in persistent memory programs

  2022cites this paper
• RDGFuzz: A directed greybox fuzzing optimization method based on Rich-Branch nodes

  2022cites this paper