PHP污点分析

0x01 污点分析和程序切片有什么不同?

问题来源

Program Slicing: 程序切片会减少程序规模,在给定一个输入,不影响输出的情况下,给出程序的一个reduced representant.(保留core functionality, 丢弃clumpy/insignificant attachments)。

Taint Analysis: traces the path of information through an application and observes all the objects which are affected/visited/influenced by the corresponding information. (我觉得这句写的真好,所以不翻译) Therefore a specific input is labeled or tagged, so it could be tracked during its execution.