IntFlow: Improving the Accuracy of Arithmetic Error Detection Using Information Flow Tracking

IntFlow is an accurate arithmetic error detection tool that combines information flow tracking and static code analysis to differentiate between non-critical arithmetic operations and potentially exploitable arithmetic bugs. IntFlow covers almost all cases of C/C++ undefined behavior and achieves high error detection coverage with over 89% false positive reduction over standalone static code instrumentation.

Author(s):

Marios Pomonis    
Columbia University
United States

Theofilos Petsios    
Columbia University
United States

Kangkook Jee    
Columbia University
United States

Michalis Polychronakis    
Columbia University
United States

Angelos D. Keromytis    
Columbia University
United States