{"id":"https://openalex.org/W7164555186","doi":"https://doi.org/10.1145/3806007.3810959","title":"Dynamic Taint Analysis for the Detection of Sensitive Data Leaks","display_name":"Dynamic Taint Analysis for the Detection of Sensitive Data Leaks","publication_year":2026,"publication_date":"2026-06-12","ids":{"openalex":"https://openalex.org/W7164555186","doi":"https://doi.org/10.1145/3806007.3810959"},"language":null,"primary_location":{"id":"doi:10.1145/3806007.3810959","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3806007.3810959","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 12th ACM International Workshop on Security and Privacy Analytics","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3806007.3810959","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5138504724","display_name":"Amadou Kabin\u00e9 Traore","orcid":"https://orcid.org/0009-0001-4303-6340"},"institutions":[{"id":"https://openalex.org/I104914703","display_name":"Universit\u00e9 du Qu\u00e9bec \u00e0 Chicoutimi","ror":"https://ror.org/00y3hzd62","country_code":"CA","type":"education","lineage":["https://openalex.org/I104914703","https://openalex.org/I49663120"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Amadou Kabin\u00e9 Traore","raw_affiliation_strings":["Laboratoire d'informatique formelle, Univerist\u00e9 du Quebec \u00e0 Chicoutimi, Chicoutimi, Qu\u00e9bec, Canada"],"raw_orcid":"https://orcid.org/0009-0001-4303-6340","affiliations":[{"raw_affiliation_string":"Laboratoire d'informatique formelle, Univerist\u00e9 du Quebec \u00e0 Chicoutimi, Chicoutimi, Qu\u00e9bec, Canada","institution_ids":["https://openalex.org/I104914703"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138485192","display_name":"Fehmi Jaafar","orcid":"https://orcid.org/0000-0002-4101-2281"},"institutions":[{"id":"https://openalex.org/I104914703","display_name":"Universit\u00e9 du Qu\u00e9bec \u00e0 Chicoutimi","ror":"https://ror.org/00y3hzd62","country_code":"CA","type":"education","lineage":["https://openalex.org/I104914703","https://openalex.org/I49663120"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Fehmi Jaafar","raw_affiliation_strings":["Laboratoire d'informatique formelle, Univerist\u00e9 du Quebec \u00e0 Chicoutimi, Chicoutimi, Qu\u00e9bec, Canada"],"raw_orcid":"https://orcid.org/0000-0002-4101-2281","affiliations":[{"raw_affiliation_string":"Laboratoire d'informatique formelle, Univerist\u00e9 du Quebec \u00e0 Chicoutimi, Chicoutimi, Qu\u00e9bec, Canada","institution_ids":["https://openalex.org/I104914703"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022249773","display_name":"Sylvain Hall\u00e9","orcid":"https://orcid.org/0000-0002-4406-6154"},"institutions":[{"id":"https://openalex.org/I104914703","display_name":"Universit\u00e9 du Qu\u00e9bec \u00e0 Chicoutimi","ror":"https://ror.org/00y3hzd62","country_code":"CA","type":"education","lineage":["https://openalex.org/I104914703","https://openalex.org/I49663120"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Sylvain Hall\u00e9","raw_affiliation_strings":["Laboratoire d'informatique formelle, Univerist\u00e9 du Quebec \u00e0 Chicoutimi, Chicoutimi, Qu\u00e9bec, Canada"],"raw_orcid":"https://orcid.org/0000-0002-4406-6154","affiliations":[{"raw_affiliation_string":"Laboratoire d'informatique formelle, Univerist\u00e9 du Quebec \u00e0 Chicoutimi, Chicoutimi, Qu\u00e9bec, Canada","institution_ids":["https://openalex.org/I104914703"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I104914703"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"77","last_page":"88"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.26840001344680786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.26840001344680786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.13809999823570251,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.08229999989271164,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/leak-detection","display_name":"Leak detection","score":0.33869999647140503},{"id":"https://openalex.org/keywords/noise","display_name":"Noise (video)","score":0.2939999997615814},{"id":"https://openalex.org/keywords/leak","display_name":"Leak","score":0.2721000015735626},{"id":"https://openalex.org/keywords/sensitivity","display_name":"Sensitivity (control systems)","score":0.24950000643730164},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.24079999327659607}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5501999855041504},{"id":"https://openalex.org/C2987355568","wikidata":"https://www.wikidata.org/wiki/Q4420957","display_name":"Leak detection","level":3,"score":0.33869999647140503},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.30309998989105225},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.2939999997615814},{"id":"https://openalex.org/C2780378346","wikidata":"https://www.wikidata.org/wiki/Q1349983","display_name":"Leak","level":2,"score":0.2721000015735626},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.26260000467300415},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.25369998812675476},{"id":"https://openalex.org/C21200559","wikidata":"https://www.wikidata.org/wiki/Q7451068","display_name":"Sensitivity (control systems)","level":2,"score":0.24950000643730164},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.24079999327659607},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.225600004196167}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3806007.3810959","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3806007.3810959","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 12th ACM International Workshop on Security and Privacy Analytics","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3806007.3810959","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3806007.3810959","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 12th ACM International Workshop on Security and Privacy Analytics","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W1552694902","https://openalex.org/W1983178058","https://openalex.org/W2002251314","https://openalex.org/W2041836242","https://openalex.org/W2124890704","https://openalex.org/W2276751698","https://openalex.org/W2593238439","https://openalex.org/W2947593054","https://openalex.org/W3202156390","https://openalex.org/W4408684014","https://openalex.org/W4408691154"],"related_works":[],"abstract_inverted_index":{"In":[0,72],"a":[1,77,98,176,217],"world":[2],"where":[3],"IT":[4],"systems":[5,39],"are":[6,128],"increasingly":[7],"exposed":[8],"to":[9,64,83,107,123,139,148,159,175,184,201],"sensitive":[10,60,86,96,206,237],"data":[11,87,92,166,207,220],"leaks,":[12,167],"these":[13],"leaks":[14],"can":[15],"be":[16],"caused":[17],"by":[18,120,131,136],"human":[19],"error":[20],"or":[21,27,110,179],"malicious":[22],"intent,":[23],"originating":[24],"from":[25,171,180],"within":[26],"outside":[28],"the":[29,56,69,117,121,132,172,181,185,195,203],"organization.":[30],"Numerous":[31],"studies":[32],"have":[33,156],"proposed":[34],"solutions,":[35],"such":[36,168],"as":[37,95,169,216],"detection":[38,57,204,228],"based":[40,45],"on":[41,46],"machine":[42],"learning,":[43],"approaches":[44],"regex":[47],"rules,":[48],"and":[49,101,238],"traditional":[50],"SIEM":[51],"platforms.":[52],"These":[53],"solutions":[54],"enable":[55],"of":[58,197,205,219],"certain":[59],"values,":[61],"but":[62],"struggle":[63],"track":[65],"their":[66,103],"propagation":[67],"in":[68,97,235],"execution":[70],"context.":[71],"this":[73,137],"article,":[74],"we":[75,155],"propose":[76],"Dynamic":[78,198],"Taint":[79,199],"Analysis":[80,200],"approach":[81,163,213],"designed":[82],"specifically":[84],"detect":[85],"leaks.":[88],"Our":[89],"method":[90],"tracks":[91],"flows":[93],"marked":[94],"relational":[99],"database":[100,122,173,182],"monitors":[102],"presence":[104],"during":[105],"exports":[106],"external":[108],"files":[109],"via":[111],"HTTP":[112],"requests.":[113],"The":[114],"system":[115],"analyzes":[116],"output":[118],"generated":[119],"produce":[124],"event":[125],"logs,":[126],"which":[127],"then":[129],"collected":[130],"Wazuh":[133],"SIEM,":[134],"enriched":[135],"mechanism,":[138],"trigger":[140],"security":[141],"alerts":[142],"while":[143,188],"filtering":[144],"out":[145],"non-sensitive":[146,239],"occurrences":[147],"reduce":[149],"false":[150],"positives.":[151],"Through":[152],"our":[153,162,212],"experiments,":[154],"been":[157],"able":[158],"demonstrate":[160],"that":[161],"effectively":[164],"identifies":[165],"transfers":[170],"(source)":[174,183],"file":[177],"(destination)":[178],"network":[186],"(destination),":[187],"maintaining":[189],"real-time":[190],"detection.":[191],"This":[192],"work":[193],"highlights":[194],"potential":[196],"improve":[202],"exfiltration.":[208],"Unlike":[209],"content-based":[210],"detection,":[211],"treats":[214],"sensitivity":[215],"property":[218],"provenance":[221],"rather":[222],"than":[223],"textual":[224],"form,":[225],"enabling":[226],"reliable":[227],"even":[229],"when":[230],"syntactically":[231],"identical":[232],"values":[233],"occur":[234],"both":[236],"datasets.":[240]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2026-06-13T00:00:00"}