PDIFT: A Practical Dynamic Information-Flow Tracker

Michael Kiperberg, Aleksei Rozman, Aleksei Kuraev, Nezer Zaidenberg

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

We present PDIFT, a hybrid dynamic information-flow tracker. PDIFT is based on a thin hypervisor, which tracks information in coarse granularity but has a negligible performance overhead. PDIFT switches to its internally embedded emulator when the information is accessed and needs to be tracked with finer granularity. Using the combination of a thin hypervisor with an embedded emulator, we achieved a significant improvement in the overall performance. We believe that PDIFT can be used as an extension to the Android base DIFT systems that currently struggle with native code tracking.

Original languageEnglish
Title of host publicationICISSP 2023 - Proceedings of the 9th International Conference on Information Systems Security and Privacy
EditorsPaolo Mori, Gabriele Lenzini, Steven Furnell
PublisherScience and Technology Publications, Lda
Pages192-198
Number of pages7
ISBN (Print)9789897586248
DOIs
StatePublished - 2023
Event9th International Conference on Information Systems Security and Privacy, ICISSP 2023 - Lisbon, Portugal
Duration: 22 Feb 202324 Feb 2023

Publication series

NameInternational Conference on Information Systems Security and Privacy
ISSN (Electronic)2184-4356

Conference

Conference9th International Conference on Information Systems Security and Privacy, ICISSP 2023
Country/TerritoryPortugal
CityLisbon
Period22/02/2324/02/23

Keywords

  • DIFT
  • Emulator
  • Hypervisor
  • Virtualization

Fingerprint

Dive into the research topics of 'PDIFT: A Practical Dynamic Information-Flow Tracker'. Together they form a unique fingerprint.

Cite this