BISM: BYTECODE-LEVEL INSTRUMENTATION FOR SOFTWARE MONITORING APREPRINT Chukri Soueidi Ali Kassem Ylies` Falcone Univ. Grenoble Alpes, Inria, Univ. Grenoble Alpes, Inria, Univ. Grenoble Alpes, Inria, CNRS, Grenoble INP, LIG CNRS, Grenoble INP, LIG CNRS, Grenoble INP, LIG 38000 Grenoble 38000 Grenoble 38000 Grenoble France France France
[email protected] [email protected] [email protected] July 16, 2020 ABSTRACT BISM (Bytecode-Level Instrumentation for Software Monitoring) is a lightweight bytecode instru- mentation tool that features an expressive high-level control-flow-aware instrumentation language. The language follows the aspect-oriented programming paradigm by adopting the joinpoint model, advice inlining, and separate instrumentation mechanisms. BISM provides joinpoints ranging from bytecode instruction to method execution, access to comprehensive static and dynamic context in- formation, and instrumentation methods. BISM runs in two instrumentation modes: build-time and load-time. We demonstrate BISM effectiveness using two experiments: a security scenario and a general runtime verification case. The results show that BISM instrumentation incurs low runtime and memory overheads. Keywords Bytecode Instrumentation · Control Flow · Aspect-Oriented Programming · Static and Dynamic Contexts. 1 Introduction Instrumentation is essential to the software monitoring workflow [1]. Instrumentation allows extracting information from a running software to abstract the execution into a trace fed to a monitor. Depending on the information needed by the monitor, the granularity level of the extracted information may range from coarse (e.g., a function call) to fine (e.g., an assignment to a local variable, a jump in the control flow). arXiv:2007.03936v2 [cs.PL] 15 Jul 2020 For software instrumentation, aspect-oriented programming (AOP) [2] is a popular and convenient paradigm where instrumentation is a cross-cutting concern.