A Practical J2EE Application Static Analysis Method Based Upon Taint Propagation

Abstract

Currently security audit/review for binaries is an upcoming method used to detect security vulnerabilities. In this paper we describe an efficient security audit method based on the java binaries. This method can The method in this invention can greatly reduce false positives and provides an efficient solution for automated secure auditing on binaries by only checking the exploitable security flows, especially for the scenarios which source codes are not available.