Skip to content

DECAF plus plus

adava edited this page Jun 19, 2019 · 2 revisions

DECAF++ is the new version of DECAF Optimized with elastic taint propagation and elastic shadow memory access idea. To activate elastic taint propagation and/or elastic shadow memory access, configure with --enable-2nd-ccache and --enable-opt-smem options, and then compile.

       ./configure --enable-tcg-taint --enable-2nd-ccache --enable-opt-smem
       make

See the following publication for further details on the elastic tainting idea:

  • Ali Davanian, Zhenxiao Qi, Yu Qu, and Heng Yin, DECAF++: Elastic Whole-System Dynamic Taint Analysis, 22nd International Symposium on Research in Attacks, Intrusions and Defenses (RAID), September 2019.
Clone this wiki locally