arrow
返回

POMP plus plus : Facilitating Postmortem Program Diagnosis with Value-Set Analysis

delete2019-01-01
delete6
delete
OA
AI
慕
慕冬亮 (Dongliang Mu) *
Y
Yunlan Du
J
Jianhao Xu
J
Jun Xu
X
Xinyu Xing
B
Bing Mao
P
Peng Liu
DOI:10.1109/TSE.2019.2939528delete
delete原文链接
delete分享
delete收藏
查看原文
摘要

摘要

En 中文
With the emergence of hardware-assisted processor tracing, execution traces can be logged with lower runtime overhead and integrated into the core dump. In comparison with an ordinary core dump, such a new post-crash artifact provides software developers and security analysts with more clues to a program crash. However, existing works only rely on the resolved runtime information, which leads to the limitation in data flow recovery within long execution traces. In this work, we propose POMP++, an automated tool to facilitate the analysis of post-crash artifacts. More specifically, POMP++ introduces a reverse execution mechanism to construct the data flow that a program followed prior to its crash. Furthermore, POMP++ utilizes Value-set Analysis, which helps to verify memory alias relation, to improve the ability of data flow recovery. With the restored data flow, POMP++ then performs backward taint analysis and highlights program statements that actually contribute to the crash. We have implemented POMP++ for Linux system on x86-32 platform, and tested it against various crashes resulting from 31 distinct real-world security vulnerabilities. The evaluation shows that, our work can pinpoint the root causes in 29 cases, increase the number of recovered memory addresses by 12 percent and reduce the execution time by 60 percent compared with existing reverse execution. In short, POMP++ can accurately and efficiently pinpoint program statements that truly contribute to the crashes, making failure diagnosis significantly convenient.
Keyword:
Computer crashes
Software
Security
Core dumps
Registers
Runtime
Tools
Postmortem program diagnosis
failure diagnosis
reverse execution
value-set analysis
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

IEEE Transactions on Software Engineering 封面图
IEEE Transactions on Software Engineering
IF:
5.6
论文数:
2.9K
被引数:
1.1W

机构

P
pennsylvania commonwealth system of higher education (pcshe)
学者数:
12.9W
论文数: 11.7W
被引数: 177
N
nanjing university
学者数:
7.8W
论文数: 5.6W
被引数: 87
引用论文

引用论文

The Coordination and Luminescence of the Eu(III) Complexes with the Polymers (PMMA, PVP)
err2018-05-07
err0
errOAAI
errWeican Zhao; Haifeng Shao; Guang Yu; Yanjun Hou; Shuhong Wang
err分享
err收藏
Impact of Arterial Hypertension on Left Atrial Size and Function
err2020-09-15
err0
errOAAI
errYoussef Ikejder; Majda Sebbani; Iliass Hendy; Mounia Khramz; Ali Khatouri; Laila Bendriss
err分享
err收藏
err分享
err收藏
Action Perception in Athletes: Expertise Facilitates Perceptual Discrimination
err2023-06-05
err0
errOAAI
errRóisín E. Harrison; Martin Giesel; Constanze Hesse
err分享
err收藏
Prevalence and Prognosis of Updated Phenotypes of Chronic Lung Allograft Dysfunction
err2020-04-01
err0
PREAI
errM.P. Combs; D.S. Wheeler; E.A. Belloli; S. Jia; D.M. Lyu; K.M. Chan; V.N. Lama
err分享
err收藏
A Wide Range Temperature Sensor Using SOI Technology
err2009-05-15
err0
errOAAI
errRichard Patterson; Malik E. Elbuluk; Ahmad Hammoud
err分享
err收藏
err分享
err收藏
IMPORTANCE OF EPILEPTIFORM DISCHARGES IN DETERMINING THE PROBABILITY OF EXCELLENT OUTCOME AFTER ANTERIOR TEMPORAL LOBECTOMY
err1997-09-01
err0
PREAI
errElson L. So; Kurapath Radhakrishnan; Peter L. Silbert; Gregory D. Cascino; Frank W. Sharbrough
err分享
err收藏
Effect of Boron Incorporation on Structural and Optical Properties of AlN Layers Grown by Metal‐Organic Vapor Phase Epitaxy
err2018-08-12
err0
PREAI
errMasataka Imura; Yuichi Ota; Ryan G. Banal; Meiyong Liao; Yoshiko Nakayama; Masaki Takeguchi; Yasuo Koide
err分享
err收藏
学者 查看更多内容