Taint tracking mechanism for computer security

摘要

A system that includes a memory and processor is provided. The processor is programmed to receive input data, determine that the input data is tainted, store the tainted input data in a location in the memory, and based on storing the tainted input data in the location, label the location as a tainted location. The processor is further programmed to assign a triggering event to the tainted location such that an action is initiated when the triggering event has occurred.

主权项

1. A system comprising:
a memory; and a processor programmed to:
receive input data;determine that the input data untaints a destination of the input data if:
all sources of the input data are untainted; orthe input data comprises instructions that write fixed results or results that are modified forms of their source operands even if one of their source operands is tainted.