Taint tracking via non-intrusive bytecode instrumentation

US11526600B2 · kind B2 · utility

Assignee

• SAP SE · DE

Inventors

• Thomas Barber · Schloss Stutensee, DE
• David Klein · New York, US
• Martin Johns · Mansfield, US

Key dates

• Filing date: Dec 18, 2020
• Grant date: Dec 13, 2022
• Expiry date: Mar 18, 2041

Classification

• Technology area (CPC H): Electricity
• CPC primary: H04L63/1441
• WIPO field: Computer technology
• WIPO sector: Electrical engineering

Abstract

Various embodiments of systems and methods to track tainting information via non-intrusive bytecode instrumentation are described herein. The described techniques include, at one aspect, defining a taint-aware class to shadow an original data class. The taint-aware class includes a payload field to store objects of the original data class, a metadata field to store tainting information corresponding to the objects of the original data class, and a method proxying a corresponding method of the original data class. In another aspect, the instances of the original data class are replaced with corresponding instances of the taint-aware class in an application bytecode. Further, in a yet another aspect, when executing the application in a runtime environment, the method propagates the content of the metadata filed and calls the corresponding method of the original data class to manage the content of the payload field.