1,000,000 Watchpoints, 20 Applications, 1 Driver, 0 Kernel Modifications
Channel: Linux.conf.au 2012 -- Ballarat, Australia
Date: 2012-01-20

State-of-the-art tools in dynamic program security vulnerability
analysis, such as Valgrind, Sage or Testudo, require the ability to
efficiently monitor program variable accesses.  The traditional
approach of using binary instrumentation or mprotect can slow
analyzed programs by orders of magnitude.  In this talk, I'll present
a open-source kernel-level solution that implements unlimited
byte-level watchpoints with significantly less slowdown.