[Soot-list] Instrument for intercepting all network I/Os

Bodden, Eric eric.bodden at sit.fraunhofer.de
Wed Feb 11 02:50:13 EST 2015


Hi Haipeng.

It really depends on exactly what you want to analyze but of course there are network sniffers like wireshark that might be simpler to use in such a scenario.

Cheers,
Eric


> On 10.02.2015, at 22:20, Haipeng Cai <hcai at nd.edu> wrote:
> 
> Hi all,
> 
> To help identify inter-process dependencies in distributed programs, I am attempting a Jimple-level instrumentation that inserts probes after all function calls related to all network I/Os. In the simplest case, I could just identify all calls of socket.getInput/OutputStream as such instrumentation points, yet that would not give me a complete set of such points.
> 
> Is there a better approach to completely (for a 100% recall) instrumenting such interceptions through static analysis?  Or, as a compromise, is there some alternative (even dynamic-analysis) approaches to capture all network I/O related function calls?
> 
> I am also wondering if there exists any relevant utilities in the latest version of Soot or its derivatives (FlowDroid, heros, etc.) that could help with this task.
> 
> Any thoughts and clues are appreciated.
> 
> Thanks.
> Haipeng Cai
> _______________________________________________
> Soot-list mailing list
> Soot-list at CS.McGill.CA
> https://mailman.CS.McGill.CA/mailman/listinfo/soot-list
> _______________________________________________
> Soot-list mailing list
> Soot-list at CS.McGill.CA
> https://mailman.CS.McGill.CA/mailman/listinfo/soot-list

--
Prof. Eric Bodden, Ph.D., http://sse.ec-spride.de/ http://bodden.de/
Head of Secure Software Engineering at Fraunhofer SIT, TU Darmstadt and EC SPRIDE
Tel: +49 6151 16-75422    Fax: +49 6151 869-127
Room B5.11, Fraunhofer SIT, Rheinstraße 75, 64295 Darmstadt

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : https://mailman.CS.McGill.CA/pipermail/soot-list/attachments/20150211/8bb0e970/attachment.bin 


More information about the Soot-list mailing list