18024777. DEVICE FOR PROVIDING ANALYSIS CAPABILITY, METHOD FOR PROVIDING ANALYSIS CAPABILITY, AND PROGRAM FOR PROVIDING ANALYSIS CAPABILITY simplified abstract (Nippon Telegraph and Telephone Corporation)

DEVICE FOR PROVIDING ANALYSIS CAPABILITY, METHOD FOR PROVIDING ANALYSIS CAPABILITY, AND PROGRAM FOR PROVIDING ANALYSIS CAPABILITY

Organization Name

Nippon Telegraph and Telephone Corporation

Inventor(s)

Toshinori Usui of Musashino-shi, Tokyo (JP)

Tomonori Ikuse of Musashino-shi, Tokyo (JP)

Yuhei Kawakoya of Musashino-shi, Tokyo (JP)

Makoto Iwamura of Musashino-shi, Tokyo (JP)

Jun Miyoshi of Musashino-shi, Tokyo (JP)

DEVICE FOR PROVIDING ANALYSIS CAPABILITY, METHOD FOR PROVIDING ANALYSIS CAPABILITY, AND PROGRAM FOR PROVIDING ANALYSIS CAPABILITY - A simplified explanation of the abstract

This abstract first appeared for US patent application 18024777 titled 'DEVICE FOR PROVIDING ANALYSIS CAPABILITY, METHOD FOR PROVIDING ANALYSIS CAPABILITY, AND PROGRAM FOR PROVIDING ANALYSIS CAPABILITY

Simplified Explanation

The abstract describes a device that analyzes the execution traces of a branch instruction and memory access to detect type conversion functions and their associated variables. It uses a test script to generate execution traces and identifies similar sequences to find candidate type conversion functions. By analyzing the input/output relationship of variables, the device performs a taint analysis to detect propagation leakage functions.

• The device acquires execution traces by executing a test script.
• It identifies similar sequences to detect candidate type conversion functions.
• It analyzes the input/output relationship of variables to detect propagation leakage functions.
• The device performs a taint analysis on type conversion functions.

Potential Applications

• Software development and debugging tools.
• Security analysis and vulnerability detection in software systems.
• Optimization of code performance and efficiency.

Problems Solved

• Identification and analysis of type conversion functions in software systems.
• Detection of propagation leakage functions that may lead to security vulnerabilities.
• Efficient analysis of execution traces to improve software development and debugging processes.

Benefits

• Improved software development and debugging processes by identifying and analyzing type conversion functions.
• Enhanced security analysis and vulnerability detection in software systems.
• Optimization of code performance and efficiency through taint analysis and detection of propagation leakage functions.

Original Abstract Submitted

The analysis function imparting device acquires a plurality of execution traces related to a branch instruction and memory access, by inputting a test script to a script engine and causing the script engine to execute the test script. The analysis function imparting device specifies a similar sequence on the basis of the plurality of execution traces and detects a function call included in the specified sequence as a candidate of a type conversion function. The analysis function imparting device detects a variable having an input/output relationship from a variable of a candidate argument and a return value of the type conversion function among the execution traces. The analysis function imparting device executes a taint analysis on the type variable function of the variable having an input/output relationship of the type conversion function, and detects a propagation leakage function indicating a type variable function.