Merge-Replay: Efficient IFDS-Based Taint Analysis by Consolidating Equivalent Value Flows

Gui, Yujiang; He, Dongjie; Xue, Jingling

doi:10.1109/ase56229.2023.00027

2023 38th IEEE/ACM International Conference on Automated Software Engineering (ASE) 2023

DOI: 10.1109/ase56229.2023.00027

|View full text |Cite

Merge-Replay: Efficient IFDS-Based Taint Analysis by Consolidating Equivalent Value Flows

Yujiang Gui,

Dongjie He,

Jingling Xue

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...

Citation Types

Supporting

Mentioning

Contrasting

Year Published

2024

Publication Types

Select...

Article1

Relationship

Self Cite0

Independent1

Authors

Journals

Cited by 1 publication

References 34 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

Boosting the Performance of Alias-Aware IFDS Analysis with CFL-Based Environment Transformers

Li,

Shi,

et al. 2024

Proc. ACM Program. Lang.

View full text Add to dashboard Cite

The IFDS algorithm is pivotal in solving field-sensitive data-flow problems. However, its conventional use of access paths for field sensitivity leads to the generation of a large number of data-flow facts. This causes scalability challenges in larger programs, limiting its practical application in extensive codebases. In response, we propose a new field-sensitive technique that reinterprets the generation of access paths as a Context-Free Language (CFL) for field-sensitivity and formulates it as an IDE problem. This approach significantly reduces the number of data-flow facts generated and handled during the analysis, which is a major factor in performance degradation. To demonstrate the effectiveness of this approach, we developed a taint analysis tool, IDEDroid, in the IFDS/IDE framework. IDEDroid outperforms FlowDroid, an established IFDS-based taint analysis tool, in the analysis of 24 major Android apps while improving its precision (guaranteed theoretically). The speed improvement ranges from 2.1× to 2,368.4×, averaging at 222.0×, with precision gains reaching up to 20.0% (in terms of false positives reduced). This performance indicates that IDEDroid is substantially more effective in detecting information-flow leaks, making it a potentially superior tool for mobile app vetting in the market.

show abstract

Boosting the Performance of Alias-Aware IFDS Analysis with CFL-Based Environment Transformers

Li,

Shi,

et al. 2024

Proc. ACM Program. Lang.

View full text Add to dashboard Cite

show abstract

scite is a Brooklyn-based organization that helps researchers better discover and understand research articles through Smart Citations–citations that display the context of the citation and describe whether the article provides supporting or contrasting evidence. scite is used by students and researchers from around the world and is funded in part by the National Science Foundation and the National Institute on Drug Abuse of the National Institutes of Health.

Contact Info

customersupport@researchsolutions.com

10624 S. Eastern Ave., Ste. A-614

Henderson, NV 89052, USA

Blog Terms and Conditions API Terms Privacy Policy Contact Cookie Preferences Do Not Sell or Share My Personal Information

Made with 💙 for researchers

Part of the Research Solutions Family.

Merge-Replay: Efficient IFDS-Based Taint Analysis by Consolidating Equivalent Value Flows

Cited by 1 publication

References 34 publications

Boosting the Performance of Alias-Aware IFDS Analysis with CFL-Based Environment Transformers

Boosting the Performance of Alias-Aware IFDS Analysis with CFL-Based Environment Transformers

Contact Info

Product

Resources

About