SPLASH 2014
Mon 20 - Fri 24 October 2014 Portland, Oregon, United States
Wed 22 Oct 2014 10:52 - 11:15 at Salon F - Runtime Systems Chair(s): Martin Hirzel

Dynamic taint analysis is a well-known information flow analysis problem with many possible applications. Taint tracking allows for analysis of application data flow by assigning labels to inputs, and then propagating those labels through data flow. Taint tracking systems traditionally compromise among performance, precision, accuracy, and portability. Performance can be critical, as these systems are typically intended to be deployed with software, and hence must have low overhead. To be deployed in security-conscious settings, taint tracking must also be accurate and precise. Dynamic taint tracking must be portable in order to be easily deployed and adopted for real world purposes, without requiring recompilation of the operating system or language interpreter, and without requiring access to application source code.

We present Phosphor, a dynamic taint tracking system for the Java Virtual Machine (JVM) that simultaneously achieves our goals of performance, accuracy, precision, and portability. Moreover, to our knowledge, it is the first portable general purpose taint tracking system for the JVM. We evaluated Phosphor’s performance on two commonly used JVM languages (Java and Scala), on two versions of two commonly used JVMs (Oracle’s HotSpot and OpenJDK’s IcedTea) and on Android’s Dalvik Virtual Machine, finding its performance to be impressive: as low as 3% (53% on average), using the DaCapo macro benchmark suite. This paper describes the approach that Phosphor uses to achieve portable taint tracking in the JVM.

Video: http://www.infoq.com/presentations/phosphor

Wed 22 Oct
Times are displayed in time zone: Tijuana, Baja California change

10:30 - 12:00
Runtime SystemsOOPSLA at Salon F
Chair(s): Martin HirzelIBM Research
10:30
22m
Talk
Tardis: Affordable Time-Travel Debugging in Managed Runtimes
OOPSLA
Earl T. BarrUniversity College London, Mark MarronMicrosoft Research
Link to publication
10:52
22m
Talk
Phosphor: Illuminating Dynamic Data Flow in Commodity JVMs
OOPSLA
Jonathan BellColumbia University, Gail KaiserColumbia University, New York
Link to publication Media Attached
11:15
22m
Talk
Rubah: DSU for Java on a stock JVM
OOPSLA
Luís PinaTechnical University of Lisbon / INESC-ID, Luís VeigaINESC-ID / Instituto Superior Técnico, Universidade de Lisboa, Michael HicksUniversity of Maryland, College Park
Link to publication
11:37
22m
Talk
Fast Conservative Garbage Collection
OOPSLA
Rifat ShahriyarAustralian National University, Steve BlackburnAustralian National University , Kathryn S McKinleyMicrosoft Research
Link to publication