Главная
Study mode:
on
1
Intro
2
C/C++ programs are unsafe
3
Sanitizers are designed to detect software bugs/vulnerabilities
4
However, sanitizers have high runtime overhead
5
Prior approaches
6
Our novel design
7
Design: overall workflow
8
Design: check identification
9
Design: dynamic pattern capturing
10
Design: static pattern capturing
11
Design: sanitizer check reduction
12
Design and implementation
13
Evaluation cost study
14
Evaluation: vulnerability detectability study
15
Application scenario
16
Summary
Description:
Explore a 14-minute conference talk from USENIX OSDI '21 that introduces SANRAZOR, an innovative tool designed to reduce redundant sanitizer checks in C/C++ programs. Learn about the challenges of high runtime costs associated with sanitizers and how SANRAZOR's hybrid approach, combining dynamic code coverage and static data dependencies, effectively detects and removes unnecessary checks. Discover the significant performance improvements achieved by SANRAZOR, reducing AddressSanitizer overhead from 73.8% to 28.0–62.0% and UndefinedBehaviorSanitizer overhead from 160.1% to 36.6–124.4%. Gain insights into the tool's effectiveness in detecting vulnerabilities and its potential for synergistic integration with existing sanitizer reduction tools, ultimately enhancing the efficiency of software debugging and vulnerability discovery processes.

SANRAZOR - Reducing Redundant Sanitizer Checks in C-C++ Programs

USENIX
Add to list
0:00 / 0:00