{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,22]],"date-time":"2026-07-22T22:56:39Z","timestamp":1784760999966,"version":"3.55.0"},"reference-count":85,"publisher":"Association for Computing Machinery (ACM)","issue":"1","license":[{"start":{"date-parts":[[2021,11,23]],"date-time":"2021-11-23T00:00:00Z","timestamp":1637625600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"National Science Foundation","award":["1801599, 1801613, 1801593, and 2007741"],"award-info":[{"award-number":["1801599, 1801613, 1801593, and 2007741"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Comput. Surv."],"published-print":{"date-parts":[[2023,1,31]]},"abstract":"<jats:p>Information flow tracking was proposed more than 40 years ago to address the limitations of access control mechanisms to guarantee the confidentiality and integrity of information flowing within a system, but has not yet been widely applied in practice for security solutions. Here, we survey and systematize literature on dynamic information flow tracking (DIFT) to discover challenges and opportunities to make it practical and effective for security solutions. We focus on common knowledge in the literature and lingering research gaps from two dimensions\u2014 (i) the layer of abstraction where DIFT is implemented (software, software\/hardware, or hardware) and (ii) the security goal (confidentiality and\/or integrity). We observe that two major limitations hinder the practical application of DIFT for on-the-fly security applications: (i) high implementation overhead and (ii) incomplete information flow tracking (low accuracy). We posit, after review of the literature, that addressing these major impedances via hardware parallelism can potentially unleash DIFT\u2019s great potential for systems security, as it can allow security policies to be implemented in a built-in and standardized fashion. Furthermore, we provide recommendations for the next generation of practical and efficient DIFT systems with an eye towards hardware-supported implementations.<\/jats:p>","DOI":"10.1145\/3483790","type":"journal-article","created":{"date-parts":[[2021,11,23]],"date-time":"2021-11-23T17:36:59Z","timestamp":1637689019000},"page":"1-33","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":15,"title":["Challenges and Opportunities for Practical and Effective Dynamic Information Flow Tracking"],"prefix":"10.1145","volume":"55","author":[{"given":"Christopher","family":"Brant","sequence":"first","affiliation":[{"name":"University of Florida, Gainesville, FL"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Prakash","family":"Shrestha","sequence":"additional","affiliation":[{"name":"University of Florida, Gainesville, FL"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Benjamin","family":"Mixon-Baca","sequence":"additional","affiliation":[{"name":"Arizona State University, Tempe, AZ"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kejun","family":"Chen","sequence":"additional","affiliation":[{"name":"University of Florida, Gainesville, FL"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Said","family":"Varlioglu","sequence":"additional","affiliation":[{"name":"University of Cincinnati, Cincinnati, OH"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nelly","family":"Elsayed","sequence":"additional","affiliation":[{"name":"University of Cincinnati, Cincinnati, OH"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yier","family":"Jin","sequence":"additional","affiliation":[{"name":"University of Florida, Gainesville, FL"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jedidiah","family":"Crandall","sequence":"additional","affiliation":[{"name":"Arizona State University, Tempe, AZ"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Daniela","family":"Oliveira","sequence":"additional","affiliation":[{"name":"University of Florida, Gainesville, FL"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2021,11,23]]},"reference":[{"key":"e_1_3_1_2_2","volume-title":"Tracking Address and Control Dependencies for Full-System Information Flow Measurement","author":"Al-Saleh Mohammed I.","year":"2010","unstructured":"Mohammed I. Al-Saleh and Jedidiah R. Crandal. 2010. Tracking Address and Control Dependencies for Full-System Information Flow Measurement. Technical Report. University of New Mexico, Department of Computer Science."},{"key":"e_1_3_1_3_2","volume-title":"The MutekH Project","author":"Becoulet Alexandre","year":"2021","unstructured":"Alexandre Becoulet. 2021. The MutekH Project. Retrieved May 19, 2021 from http:\/\/www.mutekh.org\/."},{"key":"e_1_3_1_4_2","doi-asserted-by":"publisher","DOI":"10.25046\/aj0203188"},{"key":"e_1_3_1_5_2","first-page":"231","volume-title":"Proceedings of the 48th Annual IEEE\/IFIP International Conference on Dependable Systems and Networks","author":"Arefi Meisam Navaki","year":"2018","unstructured":"Meisam Navaki Arefi, Geoffrey Alexander, Hooman Rokham, Aokun Chen, Michalis Michalis Faloutsos, Xuetao Wei, Daniela Oliveira, and Jedidiah R. Crandall. 2018. Faros: Illuminating in-memory injection attacks via provenance-based whole-system dynamic information flow tracking. In Proceedings of the 48th Annual IEEE\/IFIP International Conference on Dependable Systems and Networks. 231\u2013242. DOI: https:\/\/doi.org\/10.1109\/DSN.2018.00034"},{"key":"e_1_3_1_6_2","doi-asserted-by":"publisher","DOI":"10.5555\/646665.701193"},{"key":"e_1_3_1_7_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00043"},{"key":"e_1_3_1_8_2","doi-asserted-by":"publisher","DOI":"10.21236\/ADA023588"},{"key":"e_1_3_1_9_2","article-title":"Integrity Considerations for Secure Computer Systems","author":"Biba Ken","year":"1977","unstructured":"Ken Biba. 1977. Integrity Considerations for Secure Computer Systems. Technical Report. The MITRE Corporation, Bedford, MA.","journal-title":"The MITRE Corporation, Bedford, MA."},{"key":"e_1_3_1_10_2","volume-title":"Computer Security: Art and Science","author":"Bishop Matthew","year":"2019","unstructured":"Matthew Bishop. 2019. Computer Security: Art and Science. Addison-Wesley Pearson, Boston."},{"key":"e_1_3_1_11_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-23644-0_1"},{"key":"e_1_3_1_12_2","doi-asserted-by":"publisher","DOI":"10.1145\/1134285.1134500"},{"key":"e_1_3_1_13_2","doi-asserted-by":"publisher","DOI":"10.1145\/1455770.1455778"},{"key":"e_1_3_1_14_2","doi-asserted-by":"publisher","DOI":"10.1109\/MTV48867.2019.00018"},{"key":"e_1_3_1_15_2","doi-asserted-by":"publisher","DOI":"10.1145\/1394608.1382153"},{"key":"e_1_3_1_16_2","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382201"},{"key":"e_1_3_1_17_2","doi-asserted-by":"publisher","DOI":"10.1109\/ISCC.2006.158"},{"key":"e_1_3_1_18_2","doi-asserted-by":"publisher","DOI":"10.5555\/1251375.1251397"},{"key":"e_1_3_1_19_2","doi-asserted-by":"publisher","DOI":"10.1145\/1273463.1273490"},{"key":"e_1_3_1_20_2","doi-asserted-by":"publisher","DOI":"10.1145\/1095810.1095824"},{"key":"e_1_3_1_21_2","doi-asserted-by":"publisher","DOI":"10.1109\/FITS.2003.1264935"},{"key":"e_1_3_1_22_2","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.2004.26"},{"key":"e_1_3_1_23_2","doi-asserted-by":"publisher","DOI":"10.1145\/1187976.1187977"},{"key":"e_1_3_1_24_2","doi-asserted-by":"publisher","DOI":"10.1145\/1273440.1250722"},{"key":"e_1_3_1_25_2","doi-asserted-by":"publisher","DOI":"10.1145\/3321705.3329819"},{"key":"e_1_3_1_26_2","doi-asserted-by":"publisher","DOI":"10.1145\/360051.360056"},{"key":"e_1_3_1_27_2","doi-asserted-by":"publisher","DOI":"10.1145\/359636.359712"},{"key":"e_1_3_1_28_2","doi-asserted-by":"publisher","DOI":"10.1145\/2843859.2843867"},{"key":"e_1_3_1_29_2","doi-asserted-by":"publisher","DOI":"10.5555\/1364385.1364403"},{"key":"e_1_3_1_30_2","doi-asserted-by":"publisher","DOI":"10.1145\/2619091"},{"key":"e_1_3_1_31_2","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2016.97"},{"key":"e_1_3_1_32_2","volume-title":"Information Protection Systems","author":"Fenton Jeffrey Stewart","year":"1973","unstructured":"Jeffrey Stewart Fenton. 1973. Information Protection Systems. Ph.D. Dissertation. University of Cambridge."},{"key":"e_1_3_1_33_2","doi-asserted-by":"publisher","DOI":"10.1093\/comjnl\/17.2.143"},{"key":"e_1_3_1_34_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP.1982.10014"},{"key":"e_1_3_1_35_2","volume-title":"CISSP Exam Cram","author":"Gregg Michael","year":"2013","unstructured":"Michael Gregg. 2013. CISSP Exam Cram. Pearson IT Certification, Indianapolis, Ind."},{"key":"e_1_3_1_36_2","doi-asserted-by":"publisher","DOI":"10.1145\/268946.268976"},{"key":"e_1_3_1_37_2","first-page":"493","volume-title":"Proceedings of the EmbeddedWorld 2015: Exibition & Conferences","author":"Huuck Ralf","year":"2015","unstructured":"Ralf Huuck. 2015. IoT: The Internet of threats and static program analysis defense. In Proceedings of the EmbeddedWorld 2015: Exibition & Conferences. 493."},{"key":"e_1_3_1_38_2","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134045"},{"key":"e_1_3_1_39_2","doi-asserted-by":"publisher","DOI":"10.5555\/3277203.3277330"},{"key":"e_1_3_1_40_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCD.2017.112"},{"key":"e_1_3_1_41_2","volume-title":"Proceedings of the Network and Distributed System Security Symposium","author":"Kang Min Gyung","year":"2011","unstructured":"Min Gyung Kang, Stephen McCamant, Pongsin Poosankam, and Dawn Song. 2011. DTA++: Dynamic taint analysis with targeted control-flow propagation. In Proceedings of the Network and Distributed System Security Symposium. The Internet Society."},{"key":"e_1_3_1_42_2","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2009.5270347"},{"key":"e_1_3_1_43_2","doi-asserted-by":"publisher","DOI":"10.1145\/2365864.2151042"},{"key":"e_1_3_1_44_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2008.09.009"},{"key":"e_1_3_1_45_2","doi-asserted-by":"publisher","DOI":"10.1145\/1323293.1294293"},{"key":"e_1_3_1_46_2","volume-title":"Secure Computer Systems: A Mathematical Model","author":"LaPadula Leonard J.","year":"1973","unstructured":"Leonard J. LaPadula and D. Elliot Bell. 1973. Secure Computer Systems: A Mathematical Model. Technical Report. The MITRE Corporation, Bedford, MA."},{"key":"e_1_3_1_47_2","doi-asserted-by":"publisher","DOI":"10.1145\/2744769.2744830"},{"key":"e_1_3_1_48_2","doi-asserted-by":"publisher","DOI":"10.1145\/2907611"},{"key":"e_1_3_1_49_2","doi-asserted-by":"publisher","DOI":"10.1109\/CSMR.2010.26"},{"key":"e_1_3_1_50_2","doi-asserted-by":"publisher","DOI":"10.1145\/2487726.2487732"},{"key":"e_1_3_1_51_2","doi-asserted-by":"publisher","DOI":"10.1145\/1631716.1631722"},{"key":"e_1_3_1_52_2","doi-asserted-by":"publisher","DOI":"10.1145\/2133382.2133385"},{"key":"e_1_3_1_53_2","doi-asserted-by":"publisher","DOI":"10.1145\/292540.292561"},{"key":"e_1_3_1_54_2","doi-asserted-by":"publisher","DOI":"10.1145\/363516.363526"},{"key":"e_1_3_1_55_2","doi-asserted-by":"publisher","DOI":"10.1145\/1353536.1346308"},{"key":"e_1_3_1_56_2","volume-title":"Dynamic Information Flow Tracking on Multicores","author":"Nagarajan Vijay","year":"2008","unstructured":"Vijay Nagarajan, Ho-Seop Kim, Youfeng Wu, and Rajiv Gupta. 2008. Dynamic Information Flow Tracking on Multicores. Technical Report. University of Edinburgh."},{"key":"e_1_3_1_57_2","volume-title":"Proceedings of the Network and Distributed System Security Symposium","author":"Newsome James","year":"2005","unstructured":"James Newsome and Dawn Xiaodong Song. 2005. Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on commodity software. In Proceedings of the Network and Distributed System Security Symposium. The Internet Society."},{"key":"e_1_3_1_58_2","doi-asserted-by":"publisher","DOI":"10.1145\/2016604.2016650"},{"key":"e_1_3_1_59_2","doi-asserted-by":"publisher","DOI":"10.1109\/HPEC.2018.8547578"},{"key":"e_1_3_1_60_2","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2018.2857321"},{"key":"e_1_3_1_61_2","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2018.2834421"},{"key":"e_1_3_1_62_2","doi-asserted-by":"publisher","DOI":"10.5555\/2555692.2555696"},{"key":"e_1_3_1_63_2","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.2006.29"},{"key":"e_1_3_1_64_2","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2002.806121"},{"key":"e_1_3_1_65_2","doi-asserted-by":"publisher","DOI":"10.14722\/diss.2019.23007"},{"key":"e_1_3_1_66_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS47774.2020.00093"},{"key":"e_1_3_1_67_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.26"},{"key":"e_1_3_1_68_2","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00022"},{"key":"e_1_3_1_69_2","volume-title":"Freedom Platforms","year":"2021","unstructured":"SiFive. 2021. Freedom Platforms. Retrieved November 5, 2021 from https:\/\/github.com\/sifive\/freedom."},{"key":"e_1_3_1_70_2","doi-asserted-by":"publisher","DOI":"10.1145\/1519065.1519073"},{"key":"e_1_3_1_71_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-89862-7_1"},{"key":"e_1_3_1_72_2","doi-asserted-by":"publisher","DOI":"10.1145\/1037949.1024404"},{"key":"e_1_3_1_73_2","volume-title":"Black Duck Audits","year":"2019","unstructured":"Synopsys. 2019. Black Duck Audits. Retrieved November 5, 2021 from https:\/\/bit.ly\/2N3bvWs."},{"key":"e_1_3_1_74_2","volume-title":"Source Security and Risk Analysis (OSSRA) Report","year":"2020","unstructured":"Synopsys. 2020. Source Security and Risk Analysis (OSSRA) Report. Retrieved November 5, 2021 from https:\/\/www.techrepublic.com\/resource-library\/whitepapers\/2020-open-source-security-and-risk-analysis-report\/."},{"key":"e_1_3_1_75_2","doi-asserted-by":"publisher","DOI":"10.1145\/1669112.1669174"},{"key":"e_1_3_1_76_2","doi-asserted-by":"publisher","DOI":"10.1145\/2528521.1508258"},{"key":"e_1_3_1_77_2","doi-asserted-by":"publisher","DOI":"10.1145\/3352460.3358327"},{"key":"e_1_3_1_78_2","doi-asserted-by":"publisher","DOI":"10.1145\/1151690.1151691"},{"key":"e_1_3_1_79_2","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.2004.31"},{"key":"e_1_3_1_80_2","doi-asserted-by":"publisher","DOI":"10.1109\/RECONFIG.2018.8641695"},{"key":"e_1_3_1_81_2","doi-asserted-by":"publisher","DOI":"10.23919\/FPL.2017.8056767"},{"key":"e_1_3_1_82_2","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23068"},{"key":"e_1_3_1_83_2","doi-asserted-by":"publisher","DOI":"10.5555\/1267336.1267345"},{"key":"e_1_3_1_84_2","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315261"},{"key":"e_1_3_1_85_2","doi-asserted-by":"publisher","DOI":"10.5555\/1267308.1267327"},{"key":"e_1_3_1_86_2","doi-asserted-by":"publisher","DOI":"10.1145\/1945023.1945039"}],"container-title":["ACM Computing Surveys"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3483790","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3483790","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T20:19:03Z","timestamp":1750191543000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3483790"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,11,23]]},"references-count":85,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2023,1,31]]}},"alternative-id":["10.1145\/3483790"],"URL":"https:\/\/doi.org\/10.1145\/3483790","relation":{},"ISSN":["0360-0300","1557-7341"],"issn-type":[{"value":"0360-0300","type":"print"},{"value":"1557-7341","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,11,23]]},"assertion":[{"value":"2020-11-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2021-08-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2021-11-23","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}