Global ETD Search
Search theses and dissertations gathered from participating repositories worldwide. Every result links back to the library that holds it. No account is needed.
Results
Showing 1 to 15 of 15 for “"Taint Analysis"”.
-
Transparent and Precise Malware Analysis Using Virtualization: From Theory to Practice
<p>Dynamic analysis is an important technique used in malware analysis and is complementary to static analysis. Thus far, virtualization has been widely adopted for building fine-grained dynamic analysis tools and this trend is expected to continue. Unlike User/Kernel space malware analysis …
-
Precise Detection of Injection Attacks in Real-world Applications
… To detect injection attacks in web applications, taint analysis is mostly proposed but the precision, scalability, and runtime overhead of the detection depend on the analysis types (e.g., static vs dynamic, sound vs unsound). Moreover, in the existing dynamic taint tracking approach for Java- …
-
Detecting vulnerabilities of broadcast receivers in Android applications
… In this thesis, we first present a detailed analysis on vulnerabilities of Broadcast Receiver. Then, we design and develop a Broadcast Receiver Vulnerability Detection (BRVD) system that examines such vulnerabilities, using a combination of semantic analysis and taint analysis. Furthermore, …
-
Performing binary fuzzing using concolic execution
… control flow. The system is designed around a Taint/Crash Analysis tool combined with a Path Exploration system to generate symbolic representations of the paths, generating a new set of inputs to be tested. These are implemented using a combination of Intel PIN for the Taint Analysis and …
-
Usage Management Enforcement in Cloud Computing Virtual Machines
… capabilities and extending tools developed for taint analysis, we developed a software-based usage management enforcement mechanism that uses dynamic data flow tracking. Based on usage flow policies that are specified in machine readable licenses, the enforcement mechanism can permit or inhibit …
-
Dynamic execution prediction and pipeline balancing of streaming applications
… behavior prediction approach based on compiler analysis that can be used to efficiently estimate the time to be spent in different pipeline stages for upcoming inputs. Our approach first uses dynamic taint analysis to automatically generate an input-based execution characterization of the …
-
End-to-end security in service-oriented architecture
… monitoring and enforcement framework based on taint analysis mechanism to monitor the information flow within services and prevent information disclosure incidents. Fourth, we proposed an adaptive and secure service composition engine (ASSC), which takes advantage of an efficient heuristic …
-
Program Transformations for Vulnerability Detection in Binary Executable Files
… software on any hardware platform. Vulnerability analysis entails the process of determining whether a system contains a flaw which an attacker can exploit to compromise the system. Across the years, many approaches and strategies to perform vulnerability analysis and detection have been developed …
-
Practical Analysis of the Dynamic Characteristics of JavaScript
… for software engineering clients. Dataflow analysis approximates software behavior by analyzing the program code; it is the foundation for many software tools. However, several unique features of JavaScript render existing dataflow analysis techniques ineffective. Reflective constructs, …
-
Software defect localization using explainable deep learning
… discovery, outperforming traditional static analysis techniques. Despite their potential, machine learning-based vulnerability detectors face challenges. They exhibit low transferability and generalizability, meaning that models trained on one project may not perform well on another. The …
-
Selective Dynamic Analysis of Virtualized Whole-System Guest Environments
<p>Dynamic binary analysis is a prevalent and indispensable technique in program analysis. While several dynamic binary analysis tools and frameworks have been proposed, all suffer from one or more of: prohibitive performance degradation, a semantic gap between the analysis code and the execution …
-
Enhancing Software Security through Code Diversification Verification, Control-flow Restriction, and Automatic Compartmentalization
… Based on user inputs, IBCS employs hybrid taint analysis to generate sensitive code paths and further analyze each tainted data using novel assembly analyses to identify and enforce selective targets. Evaluations of IBCS demonstrate its security effectiveness through adversarial analysis …
-
Enhancing automated debugging for java programs through data-flow analysis and automated program repair
Submission original under an indefinite embargo labeled 'Open Access'. The submission was exported from vireo on 2025-10-20 without embargo terms
-
Automated detection of injection vulnerabilities in web applications
… In this dissertation, we describe two different analysis techniques that could be used to automatically prevent and/or detect two specific types of injection vulnerabilities— SQL injection attacks on web applications and cross-context scripting attacks in Firefox browser extensions. In case of …
-
Quantitative Metrics and Measurement Methodologies for System Security Assurance
Proactive approaches for preventing attacks through security measurements are crucial for preventing sophisticated attacks. However, proactive measures must employ qualitative security metrics and systemic measurement methodologies to assess security guarantees, as some metrics (e.g., entropy) used …