Panalyst: Privacy-Aware Remote Error Analysis on Commodity Software

Remote error analysis aims at timely detection and remedy of software vulnerabilities through analyzing runtime errors that occur on the client. This objective can only be achieved by offering users effective protection of their private information and minimizing the performance impact of the analysis on their systems without undermining the amount of information the server can access for understanding errors. To this end, we propose in the paper a new technique for privacy-aware remote analysis, called Panalyst. Panalyst includes a client component and a server component. Once a runtime exception happens to an application, Panalyst client sends the server an initial error report that includes only public information regarding the error, such as the length of the packet that triggers the exception. Using an input built from the report, Panalyst server performs a taint analysis and symbolic execution on the application, and adjusts the input by querying the client about the information...

• Type: Conference
• Year: 2008
• Where: USS
• Authors: Rui Wang 0010, XiaoFeng Wang, Zhuowei Li
• Keywords: Client Component, Error Analysis, Initial Error Report, Operating System, USS 2008