[Soot-list] FlowDroid - How to output all Abstraction objects generated during analysis

[Steven Arzt]

Hi Katie,

 

FlowDroid has handlers that allow you to capture all the abstractions (and also modify them before passing them back to the taint propagation engine if required). You don’t even need to modify the FlowDroid source code – notifyOutFlowHandlers() is essentially just passing on the abstractions to the TaintPropagationHandler registered with the data flow tracker. The intended usage would thus be to call Infoflow.setTaintPropagationHandler() and get the abstractions in that callback.

 

However, beware that the abstractions are quite many. Storing all of them might make your analysis run out of memory pretty quickly.

 

Best regards,

  Steven

 

 

M.Sc. M.Sc. Steven Arzt

Secure Software Engineering Group (SSE)

European Center for Security and Privacy by Design (EC SPRIDE) 

Rheinstraße 75

D-64293 Darmstadt

Phone: +49 61 51 869-336

Fax: +49 61 51 16-72118

eMail:  <mailto:steven.arzt at ec-spride.de> steven.arzt at ec-spride.de

Web:  <http://sse.ec-spride.de/> http://sse.ec-spride.de

 

 

 

Von: soot-list-bounces at CS.McGill.CA [mailto:soot-list-bounces at CS.McGill.CA] Im Auftrag von kaunder
Gesendet: Freitag, 25. September 2015 00:18
An: soot-list at CS.McGill.CA
Betreff: [Soot-list] FlowDroid - How to output all Abstraction objects generated during analysis

 

Hello,

 

I am interested in modifying FlowDroid to output tainted flows from all

sources, not just those which terminate in a defined sink. To this end,

I want to extract all Abstraction objects generated during the analysis

of an application. 

 

My current approach is to capture the set of Abstraction objects returned

by method notifyOutFlowHandlers in InfoflowProblem.java. Would this be the

correct location to ensure that I capture all Abstractions and do not miss

any flows? Or should I be looking at another method in InfoflowProblem.java

(or elsewhere)?

 

Thank you for any insight you can offer me.

 

Best Regards,

 

Katie Underwood

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://mailman.CS.McGill.CA/pipermail/soot-list/attachments/20150925/393c7649/attachment.html