Comprehensive Java Metadata Tracking for Attack Detection and Repair
Name
ClearTrack_mit_tech_report.pdf
Size
193.25 KB
Format
Adobe PDF
Checksum (MD5)
4fcf9f3b6ae49456d7233bbda18a29da
Author(s)
Perkins, Jeff
Eikenberry, Jordan
Coglio, Alessandro
Rinard, Martin
Date Issued
November 19, 2019
Abstract
We present ClearTrack, a system that tracks 32 bits of metadata for each primitive value in Java programs to detect and nullify a range of vulnerabilities such as integer overflow and underflow vulnerabilities, SQL injection vulnerabilities, and command injection vulnerabilities. Contributions include new techniques for eliminating false positives associated with benign integer overflows and underflows, new metadata-aware techniques for detecting and nullifying SQL and command injection attacks, and results from an evaluation of ClearTrack performed by a Test and Evaluation team hired by the sponsor of this research (an anonymous agency of the United States government). These results show that 1) ClearTrack operates successfully on Java programs comprising hundreds of thousands of lines of code (including instrumented jar files and Java system libraries, the majority of the applications comprise over 3 million lines of code), 2) because of computations such as cryptography and hash table calculations, these applications perform millions of benign integer overflows and underflows, and 3) ClearTrack successfully detects and nullifies all tested integer overflow and underflow, SQL injection, and command injection vulnerabilities in the benchmark applications.
Subjects
security
runtime instrumentation
numeric errrors
Terms of Use
Attribution-NonCommercial-NoDerivs 3.0 United States
Persistent DSpace Link
