Dynamic Taint Tracking Simulation

TitleDynamic Taint Tracking Simulation
Publication TypeJournal Article
Year of Publication2020
AuthorsBerner, F., Mayrhofer R., & Sametinger J.
Secondary AuthorsObaidat, M. S.
JournalCommunications in Computer and Information Science
Date Published7
Type of ArticlePAPERREF
ISBN Number978-3-030-52685-6

Detection of unauthorized disclosure of sensitive data is still an open problem. Taint tracking is one effective approach to detect information disclosure attacks. In this paper, we give an overview of dynamic taint tracking systems for Android. First, we discuss systems and identify their shortcomings. The contribution of this paper is to present a novel solution for these shortcomings. For that purpose, we have developed a simulation concept and a prototype implementation. Special features are the possibility to record simulations and play them back automatically. By comparing the original simulation with a repeated simulation a changed security level can be detected.

PDF download: