Designing Robust API Monitoring Solutions
Fuente:
arXiv
Saved in:
| Main Authors: | , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2020
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866916457733947392 |
|---|---|
| author | D'Elia, Daniele Cono Nicchi, Simone Mariani, Matteo Marini, Matteo Palmaro, Federico |
| author_facet | D'Elia, Daniele Cono Nicchi, Simone Mariani, Matteo Marini, Matteo Palmaro, Federico |
| contents | Tracing the sequence of library and system calls that a program makes is very helpful in the characterization of its interactions with the surrounding environment and ultimately of its semantics. Due to entanglements of real-world software stacks, accomplishing this task can be surprisingly challenging as we take accuracy, reliability, and transparency into the equation. To manage these dimensions effectively, we identify six challenges that API monitoring solutions should overcome and outline actionable design points for them, reporting insights from our experience in building API tracers for software security research. We detail two implementation variants, based on hardware-assisted virtualization (realizing the first general-purpose user-space tracer of this kind) and on dynamic binary translation, that achieve API monitoring robustly. We share our SNIPER system as open source. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2005_00323 |
| institution | arXiv |
| publishDate | 2020 |
| record_format | arxiv |
| spellingShingle | Designing Robust API Monitoring Solutions D'Elia, Daniele Cono Nicchi, Simone Mariani, Matteo Marini, Matteo Palmaro, Federico Cryptography and Security Operating Systems Software Engineering Tracing the sequence of library and system calls that a program makes is very helpful in the characterization of its interactions with the surrounding environment and ultimately of its semantics. Due to entanglements of real-world software stacks, accomplishing this task can be surprisingly challenging as we take accuracy, reliability, and transparency into the equation. To manage these dimensions effectively, we identify six challenges that API monitoring solutions should overcome and outline actionable design points for them, reporting insights from our experience in building API tracers for software security research. We detail two implementation variants, based on hardware-assisted virtualization (realizing the first general-purpose user-space tracer of this kind) and on dynamic binary translation, that achieve API monitoring robustly. We share our SNIPER system as open source. |
| title | Designing Robust API Monitoring Solutions |
| topic | Cryptography and Security Operating Systems Software Engineering |
| url | https://arxiv.org/abs/2005.00323 |