关键词: 动态污点分析, 系统安全, 程序脆弱性, 检测工具, libdft框架

Abstract: Due to the semantic differences between the program source code and the compiled executable file, and the uncertainty of user input, it is impossible to ensure that the verified properties in the source code are still consistent with their executable files in practical applications. Therefore, in the case of program source code is not provided, directly to its executable vulnerability analysis detection is more meaningful.In this paper, the application research of dynamic taint analysis technology in program vulnerability detection is carried out. A program vulnerability detection tool based on libdft API is designed, and the pollution source and pollution sink are customized to adapt to different vulnerability modes. The tool does not need to analyze the source code of the target program, but can directly detect the binary program. The test results show that the tool can effectively detect a variety of program vulnerabilities such as heart attack, formatted string attack, data leakage, ReturnToLibc attack, etc. It has certain reference value to help programmers detect program security and protect computer data security.

Key words: dynamic taint analysis, system security, program vulnerability, detection tools, libdft frame