HIT: Hybrid-Mode Information Flow Tracking with Taint Semantics Extraction and Replay

Yu Hsin Hung; Hong Wei Li; Yu-Sung Wu; Bing Jhong Jheng; Yen Nun Huang

doi:10.1109/DSN-W.2018.00037

HIT: Hybrid-Mode Information Flow Tracking with Taint Semantics Extraction and Replay

Yu Hsin Hung, Hong Wei Li, Yu-Sung Wu, Bing Jhong Jheng, Yen Nun Huang

Institute of Computer Science and Engineering

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Abstract

Due to increasing complexity in security attacks, it is no longer sufficient to rely on generic network-level and system-level events for attack detection. We propose the hybrid-mode information flow tracking (HIT) system to reveal application-level events by integrating static information analysis (IFA) and dynamic information flow tracking (DIFT) into the applications. Preliminary results indicate the effectiveness of the approach in detecting sensitive data leakage with a modest performance overhead.

Original language	English
Title of host publication	Proceedings - 48th Annual IEEE/IFIP International Conference on Dependable Systems and Networks Workshops, DSN-W 2018
Publisher	Institute of Electrical and Electronics Engineers Inc.
Pages	75-76
Number of pages	2
ISBN (Electronic)	9781538655955
DOIs	https://doi.org/10.1109/DSN-W.2018.00037
State	Published - 19 Jul 2018
Event	48th Annual IEEE/IFIP International Conference on Dependable Systems and Networks Workshops, DSN-W 2018 - Luxembourg City, Luxembourg Duration: 25 Jun 2018 → 28 Jun 2018

Publication series

Name	Proceedings - 48th Annual IEEE/IFIP International Conference on Dependable Systems and Networks Workshops, DSN-W 2018

Conference

Conference	48th Annual IEEE/IFIP International Conference on Dependable Systems and Networks Workshops, DSN-W 2018
Country	Luxembourg
City	Luxembourg City
Period	25/06/18 → 28/06/18

Keywords

anomaly detection
application logic vulnerabilities
decoupled dynamic information flow tracking
online system
static information flow analysis
taint propagation

Access to Document

10.1109/DSN-W.2018.00037

Link to publication in Scopus

Fingerprint Dive into the research topics of 'HIT: Hybrid-Mode Information Flow Tracking with Taint Semantics Extraction and Replay'. Together they form a unique fingerprint.

Cite this

Hung, Y. H., Li, H. W., Wu, Y-S., Jheng, B. J., & Huang, Y. N. (2018). HIT: Hybrid-Mode Information Flow Tracking with Taint Semantics Extraction and Replay. In Proceedings - 48th Annual IEEE/IFIP International Conference on Dependable Systems and Networks Workshops, DSN-W 2018 (pp. 75-76). [8416222] (Proceedings - 48th Annual IEEE/IFIP International Conference on Dependable Systems and Networks Workshops, DSN-W 2018). Institute of Electrical and Electronics Engineers Inc.. https://doi.org/10.1109/DSN-W.2018.00037

Hung, Yu Hsin ; Li, Hong Wei ; Wu, Yu-Sung ; Jheng, Bing Jhong ; Huang, Yen Nun. / HIT : Hybrid-Mode Information Flow Tracking with Taint Semantics Extraction and Replay. Proceedings - 48th Annual IEEE/IFIP International Conference on Dependable Systems and Networks Workshops, DSN-W 2018. Institute of Electrical and Electronics Engineers Inc., 2018. pp. 75-76 (Proceedings - 48th Annual IEEE/IFIP International Conference on Dependable Systems and Networks Workshops, DSN-W 2018).

@inproceedings{db1d0a32e9f64f50a217818ef9965fba,

title = "HIT: Hybrid-Mode Information Flow Tracking with Taint Semantics Extraction and Replay",

abstract = "Due to increasing complexity in security attacks, it is no longer sufficient to rely on generic network-level and system-level events for attack detection. We propose the hybrid-mode information flow tracking (HIT) system to reveal application-level events by integrating static information analysis (IFA) and dynamic information flow tracking (DIFT) into the applications. Preliminary results indicate the effectiveness of the approach in detecting sensitive data leakage with a modest performance overhead.",

keywords = "anomaly detection, application logic vulnerabilities, decoupled dynamic information flow tracking, online system, static information flow analysis, taint propagation",

author = "Hung, {Yu Hsin} and Li, {Hong Wei} and Yu-Sung Wu and Jheng, {Bing Jhong} and Huang, {Yen Nun}",

year = "2018",

month = jul,

day = "19",

doi = "10.1109/DSN-W.2018.00037",

language = "English",

series = "Proceedings - 48th Annual IEEE/IFIP International Conference on Dependable Systems and Networks Workshops, DSN-W 2018",

publisher = "Institute of Electrical and Electronics Engineers Inc.",

pages = "75--76",

booktitle = "Proceedings - 48th Annual IEEE/IFIP International Conference on Dependable Systems and Networks Workshops, DSN-W 2018",

note = "null ; Conference date: 25-06-2018 Through 28-06-2018",

}

Hung, YH, Li, HW, Wu, Y-S, Jheng, BJ & Huang, YN 2018, HIT: Hybrid-Mode Information Flow Tracking with Taint Semantics Extraction and Replay. in Proceedings - 48th Annual IEEE/IFIP International Conference on Dependable Systems and Networks Workshops, DSN-W 2018., 8416222, Proceedings - 48th Annual IEEE/IFIP International Conference on Dependable Systems and Networks Workshops, DSN-W 2018, Institute of Electrical and Electronics Engineers Inc., pp. 75-76, 48th Annual IEEE/IFIP International Conference on Dependable Systems and Networks Workshops, DSN-W 2018, Luxembourg City, Luxembourg, 25/06/18. https://doi.org/10.1109/DSN-W.2018.00037

HIT : Hybrid-Mode Information Flow Tracking with Taint Semantics Extraction and Replay. / Hung, Yu Hsin; Li, Hong Wei; Wu, Yu-Sung; Jheng, Bing Jhong; Huang, Yen Nun.

Proceedings - 48th Annual IEEE/IFIP International Conference on Dependable Systems and Networks Workshops, DSN-W 2018. Institute of Electrical and Electronics Engineers Inc., 2018. p. 75-76 8416222 (Proceedings - 48th Annual IEEE/IFIP International Conference on Dependable Systems and Networks Workshops, DSN-W 2018).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

TY - GEN

T1 - HIT

AU - Hung, Yu Hsin

AU - Li, Hong Wei

AU - Wu, Yu-Sung

AU - Jheng, Bing Jhong

AU - Huang, Yen Nun

PY - 2018/7/19

Y1 - 2018/7/19

N2 - Due to increasing complexity in security attacks, it is no longer sufficient to rely on generic network-level and system-level events for attack detection. We propose the hybrid-mode information flow tracking (HIT) system to reveal application-level events by integrating static information analysis (IFA) and dynamic information flow tracking (DIFT) into the applications. Preliminary results indicate the effectiveness of the approach in detecting sensitive data leakage with a modest performance overhead.

AB - Due to increasing complexity in security attacks, it is no longer sufficient to rely on generic network-level and system-level events for attack detection. We propose the hybrid-mode information flow tracking (HIT) system to reveal application-level events by integrating static information analysis (IFA) and dynamic information flow tracking (DIFT) into the applications. Preliminary results indicate the effectiveness of the approach in detecting sensitive data leakage with a modest performance overhead.

KW - anomaly detection

KW - application logic vulnerabilities

KW - decoupled dynamic information flow tracking

KW - online system

KW - static information flow analysis

KW - taint propagation

UR - http://www.scopus.com/inward/record.url?scp=85051240215&partnerID=8YFLogxK

U2 - 10.1109/DSN-W.2018.00037

DO - 10.1109/DSN-W.2018.00037

M3 - Conference contribution

AN - SCOPUS:85051240215

T3 - Proceedings - 48th Annual IEEE/IFIP International Conference on Dependable Systems and Networks Workshops, DSN-W 2018

SP - 75

EP - 76

BT - Proceedings - 48th Annual IEEE/IFIP International Conference on Dependable Systems and Networks Workshops, DSN-W 2018

PB - Institute of Electrical and Electronics Engineers Inc.

Y2 - 25 June 2018 through 28 June 2018

ER -

Hung YH, Li HW, Wu Y-S, Jheng BJ, Huang YN. HIT: Hybrid-Mode Information Flow Tracking with Taint Semantics Extraction and Replay. In Proceedings - 48th Annual IEEE/IFIP International Conference on Dependable Systems and Networks Workshops, DSN-W 2018. Institute of Electrical and Electronics Engineers Inc. 2018. p. 75-76. 8416222. (Proceedings - 48th Annual IEEE/IFIP International Conference on Dependable Systems and Networks Workshops, DSN-W 2018). https://doi.org/10.1109/DSN-W.2018.00037