Abstract: Time and space overhead of the track process in the off-line taint analysis is enormous, so research on the efficient track method is of great significance in the offline taint analysis. This paper proposes an efficient method of track recording. The method uses Pin to record executed instructions, only records the changes of registers when the uncertain event occurs, then reduces the track data, and proves the information equivalence theoretically. Experiments show that the method can effectively reduce the time and spaces overhead of the track process in the off-line taint analysis, and improve efficiency of the taint analysis.

Key words: heuristic, track recording, off-line taint analysis, dynamic binary instrument, track packing

摘要： 离线污点分析的轨迹记录过程的时空开销非常巨大，因此研究高效的轨迹记录方式在离线污点分析中具有重要意义。基于此，针对传统指令级轨迹记录存在的时空开销过大的问题，结合程序重放的思想，提出了一种启发式的轨迹记录方法，只在基本块和特殊事件发生时记录寄存器变化状态信息，并对该种记录方法的信息等价性进行了理论证明。实验表明，该方法能够有效降低离线污点分析中轨迹记录的时空开销，提高污点分析效率。

关键词: 启发式, 轨迹记录, 离线污点分析, 动态二进制插桩, 轨迹约减