-
Notifications
You must be signed in to change notification settings - Fork 290
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add EVENT_TYPE to the StackTraceEvent #7638
Conversation
BenchmarksStartupParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 49 metrics, 14 unstable metrics. Startup time reports for insecure-bankgantt
title insecure-bank - global startup overhead: candidate=1.40.0-SNAPSHOT~15e88a01b7, baseline=1.40.0-SNAPSHOT~5765052e34
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.069 s) : 0, 1068746
Total [baseline] (8.591 s) : 0, 8590832
Agent [candidate] (1.072 s) : 0, 1071757
Total [candidate] (8.594 s) : 0, 8593740
section iast
Agent [baseline] (1.191 s) : 0, 1190776
Total [baseline] (9.023 s) : 0, 9022646
Agent [candidate] (1.201 s) : 0, 1200564
Total [candidate] (9.043 s) : 0, 9043042
section iast_HARDCODED_SECRET_DISABLED
Agent [baseline] (1.189 s) : 0, 1188818
Total [baseline] (9.001 s) : 0, 9001014
Agent [candidate] (1.193 s) : 0, 1192931
Total [candidate] (9.016 s) : 0, 9016048
section iast_TELEMETRY_OFF
Agent [baseline] (1.196 s) : 0, 1196422
Total [baseline] (9.062 s) : 0, 9062237
Agent [candidate] (1.188 s) : 0, 1187557
Total [candidate] (9.039 s) : 0, 9039002
gantt
title insecure-bank - break down per module: candidate=1.40.0-SNAPSHOT~15e88a01b7, baseline=1.40.0-SNAPSHOT~5765052e34
dateFormat X
axisFormat %s
section tracing
BytebuddyAgent [baseline] (683.324 ms) : 0, 683324
BytebuddyAgent [candidate] (682.946 ms) : 0, 682946
GlobalTracer [baseline] (310.535 ms) : 0, 310535
GlobalTracer [candidate] (313.654 ms) : 0, 313654
AppSec [baseline] (52.781 ms) : 0, 52781
AppSec [candidate] (53.162 ms) : 0, 53162
Remote Config [baseline] (662.944 µs) : 0, 663
Remote Config [candidate] (661.264 µs) : 0, 661
Telemetry [baseline] (7.606 ms) : 0, 7606
Telemetry [candidate] (7.581 ms) : 0, 7581
section iast
BytebuddyAgent [baseline] (791.7 ms) : 0, 791700
BytebuddyAgent [candidate] (798.654 ms) : 0, 798654
GlobalTracer [baseline] (299.732 ms) : 0, 299732
GlobalTracer [candidate] (301.974 ms) : 0, 301974
AppSec [baseline] (53.931 ms) : 0, 53931
AppSec [candidate] (53.966 ms) : 0, 53966
IAST [baseline] (23.681 ms) : 0, 23681
IAST [candidate] (23.873 ms) : 0, 23873
Remote Config [baseline] (623.744 µs) : 0, 624
Remote Config [candidate] (653.282 µs) : 0, 653
Telemetry [baseline] (7.369 ms) : 0, 7369
Telemetry [candidate] (7.546 ms) : 0, 7546
section iast_HARDCODED_SECRET_DISABLED
BytebuddyAgent [baseline] (790.952 ms) : 0, 790952
BytebuddyAgent [candidate] (792.975 ms) : 0, 792975
GlobalTracer [baseline] (299.279 ms) : 0, 299279
GlobalTracer [candidate] (300.654 ms) : 0, 300654
AppSec [baseline] (54.095 ms) : 0, 54095
AppSec [candidate] (52.301 ms) : 0, 52301
IAST [baseline] (22.67 ms) : 0, 22670
IAST [candidate] (25.259 ms) : 0, 25259
Remote Config [baseline] (629.381 µs) : 0, 629
Remote Config [candidate] (631.522 µs) : 0, 632
Telemetry [baseline] (7.447 ms) : 0, 7447
Telemetry [candidate] (7.323 ms) : 0, 7323
section iast_TELEMETRY_OFF
BytebuddyAgent [baseline] (794.902 ms) : 0, 794902
BytebuddyAgent [candidate] (788.708 ms) : 0, 788708
GlobalTracer [baseline] (301.809 ms) : 0, 301809
GlobalTracer [candidate] (299.961 ms) : 0, 299961
AppSec [baseline] (55.227 ms) : 0, 55227
AppSec [candidate] (55.631 ms) : 0, 55631
IAST [baseline] (22.644 ms) : 0, 22644
IAST [candidate] (20.845 ms) : 0, 20845
Remote Config [baseline] (603.369 µs) : 0, 603
Remote Config [candidate] (605.516 µs) : 0, 606
Telemetry [baseline] (7.363 ms) : 0, 7363
Telemetry [candidate] (8.052 ms) : 0, 8052
Startup time reports for petclinicgantt
title petclinic - global startup overhead: candidate=1.40.0-SNAPSHOT~15e88a01b7, baseline=1.40.0-SNAPSHOT~5765052e34
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.067 s) : 0, 1066998
Total [baseline] (10.444 s) : 0, 10443843
Agent [candidate] (1.065 s) : 0, 1065311
Total [candidate] (10.431 s) : 0, 10430741
section appsec
Agent [baseline] (1.206 s) : 0, 1205931
Total [baseline] (10.742 s) : 0, 10741511
Agent [candidate] (1.207 s) : 0, 1207042
Total [candidate] (10.683 s) : 0, 10682933
section iast
Agent [baseline] (1.193 s) : 0, 1193322
Total [baseline] (10.837 s) : 0, 10836641
Agent [candidate] (1.193 s) : 0, 1193158
Total [candidate] (10.969 s) : 0, 10969498
section profiling
Agent [baseline] (1.267 s) : 0, 1266530
Total [baseline] (10.66 s) : 0, 10660418
Agent [candidate] (1.275 s) : 0, 1274538
Total [candidate] (10.714 s) : 0, 10713840
gantt
title petclinic - break down per module: candidate=1.40.0-SNAPSHOT~15e88a01b7, baseline=1.40.0-SNAPSHOT~5765052e34
dateFormat X
axisFormat %s
section tracing
BytebuddyAgent [baseline] (680.988 ms) : 0, 680988
BytebuddyAgent [candidate] (679.756 ms) : 0, 679756
GlobalTracer [baseline] (311.15 ms) : 0, 311150
GlobalTracer [candidate] (311.18 ms) : 0, 311180
AppSec [baseline] (52.88 ms) : 0, 52880
AppSec [candidate] (52.467 ms) : 0, 52467
Remote Config [baseline] (668.76 µs) : 0, 669
Remote Config [candidate] (660.14 µs) : 0, 660
Telemetry [baseline] (7.585 ms) : 0, 7585
Telemetry [candidate] (7.492 ms) : 0, 7492
section appsec
BytebuddyAgent [baseline] (706.522 ms) : 0, 706522
BytebuddyAgent [candidate] (707.649 ms) : 0, 707649
GlobalTracer [baseline] (304.933 ms) : 0, 304933
GlobalTracer [candidate] (305.505 ms) : 0, 305505
AppSec [baseline] (162.065 ms) : 0, 162065
AppSec [candidate] (161.576 ms) : 0, 161576
IAST [baseline] (20.614 ms) : 0, 20614
IAST [candidate] (20.884 ms) : 0, 20884
Remote Config [baseline] (626.614 µs) : 0, 627
Remote Config [candidate] (644.242 µs) : 0, 644
Telemetry [baseline] (7.707 ms) : 0, 7707
Telemetry [candidate] (7.415 ms) : 0, 7415
section iast
BytebuddyAgent [baseline] (793.203 ms) : 0, 793203
BytebuddyAgent [candidate] (793.302 ms) : 0, 793302
GlobalTracer [baseline] (300.295 ms) : 0, 300295
GlobalTracer [candidate] (300.062 ms) : 0, 300062
AppSec [baseline] (52.729 ms) : 0, 52729
AppSec [candidate] (55.832 ms) : 0, 55832
IAST [baseline] (25.264 ms) : 0, 25264
IAST [candidate] (22.162 ms) : 0, 22162
Remote Config [baseline] (702.937 µs) : 0, 703
Remote Config [candidate] (619.799 µs) : 0, 620
Telemetry [baseline] (7.376 ms) : 0, 7376
Telemetry [candidate] (7.434 ms) : 0, 7434
section profiling
BytebuddyAgent [baseline] (673.065 ms) : 0, 673065
BytebuddyAgent [candidate] (679.289 ms) : 0, 679289
GlobalTracer [baseline] (396.075 ms) : 0, 396075
GlobalTracer [candidate] (396.959 ms) : 0, 396959
AppSec [baseline] (53.586 ms) : 0, 53586
AppSec [candidate] (53.578 ms) : 0, 53578
Remote Config [baseline] (649.302 µs) : 0, 649
Remote Config [candidate] (655.524 µs) : 0, 656
Telemetry [baseline] (7.434 ms) : 0, 7434
Telemetry [candidate] (7.491 ms) : 0, 7491
ProfilingAgent [baseline] (97.575 ms) : 0, 97575
ProfilingAgent [candidate] (97.985 ms) : 0, 97985
Profiling [baseline] (97.598 ms) : 0, 97598
Profiling [candidate] (98.008 ms) : 0, 98008
LoadParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 9 metrics, 19 unstable metrics. Request duration reports for insecure-bankgantt
title insecure-bank - request duration [CI 0.99] : candidate=1.40.0-SNAPSHOT~15e88a01b7, baseline=1.40.0-SNAPSHOT~5765052e34
dateFormat X
axisFormat %s
section baseline
no_agent (343.374 µs) : 324, 363
. : milestone, 343,
iast (457.05 µs) : 436, 479
. : milestone, 457,
iast_FULL (516.58 µs) : 495, 538
. : milestone, 517,
iast_GLOBAL (476.981 µs) : 456, 498
. : milestone, 477,
iast_HARDCODED_SECRET_DISABLED (455.727 µs) : 435, 477
. : milestone, 456,
iast_INACTIVE (415.73 µs) : 395, 437
. : milestone, 416,
iast_TELEMETRY_OFF (445.519 µs) : 423, 468
. : milestone, 446,
tracing (411.144 µs) : 391, 431
. : milestone, 411,
section candidate
no_agent (345.384 µs) : 326, 365
. : milestone, 345,
iast (458.992 µs) : 438, 480
. : milestone, 459,
iast_FULL (521.223 µs) : 500, 542
. : milestone, 521,
iast_GLOBAL (475.411 µs) : 454, 497
. : milestone, 475,
iast_HARDCODED_SECRET_DISABLED (454.145 µs) : 433, 475
. : milestone, 454,
iast_INACTIVE (422.101 µs) : 402, 443
. : milestone, 422,
iast_TELEMETRY_OFF (445.699 µs) : 423, 468
. : milestone, 446,
tracing (416.407 µs) : 395, 438
. : milestone, 416,
Request duration reports for petclinicgantt
title petclinic - request duration [CI 0.99] : candidate=1.40.0-SNAPSHOT~15e88a01b7, baseline=1.40.0-SNAPSHOT~5765052e34
dateFormat X
axisFormat %s
section baseline
no_agent (1.3 ms) : 1280, 1320
. : milestone, 1300,
appsec (1.675 ms) : 1652, 1699
. : milestone, 1675,
appsec_no_iast (1.698 ms) : 1674, 1722
. : milestone, 1698,
iast (1.444 ms) : 1421, 1467
. : milestone, 1444,
profiling (1.504 ms) : 1480, 1528
. : milestone, 1504,
tracing (1.432 ms) : 1408, 1455
. : milestone, 1432,
section candidate
no_agent (1.311 ms) : 1292, 1331
. : milestone, 1311,
appsec (1.695 ms) : 1672, 1718
. : milestone, 1695,
appsec_no_iast (1.696 ms) : 1671, 1721
. : milestone, 1696,
iast (1.469 ms) : 1446, 1491
. : milestone, 1469,
profiling (1.503 ms) : 1479, 1527
. : milestone, 1503,
tracing (1.453 ms) : 1429, 1477
. : milestone, 1453,
DacapoParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 12 metrics, 0 unstable metrics. Execution time for biojavagantt
title biojava - execution time [CI 0.99] : candidate=1.40.0-SNAPSHOT~15e88a01b7, baseline=1.40.0-SNAPSHOT~5765052e34
dateFormat X
axisFormat %s
section baseline
no_agent (14.984 s) : 14984000, 14984000
. : milestone, 14984000,
appsec (15.24 s) : 15240000, 15240000
. : milestone, 15240000,
iast (18.553 s) : 18553000, 18553000
. : milestone, 18553000,
iast_GLOBAL (18.044 s) : 18044000, 18044000
. : milestone, 18044000,
profiling (15.064 s) : 15064000, 15064000
. : milestone, 15064000,
tracing (14.89 s) : 14890000, 14890000
. : milestone, 14890000,
section candidate
no_agent (15.098 s) : 15098000, 15098000
. : milestone, 15098000,
appsec (15.159 s) : 15159000, 15159000
. : milestone, 15159000,
iast (18.939 s) : 18939000, 18939000
. : milestone, 18939000,
iast_GLOBAL (18.356 s) : 18356000, 18356000
. : milestone, 18356000,
profiling (15.283 s) : 15283000, 15283000
. : milestone, 15283000,
tracing (15.071 s) : 15071000, 15071000
. : milestone, 15071000,
Execution time for tomcatgantt
title tomcat - execution time [CI 0.99] : candidate=1.40.0-SNAPSHOT~15e88a01b7, baseline=1.40.0-SNAPSHOT~5765052e34
dateFormat X
axisFormat %s
section baseline
no_agent (1.441 ms) : 1430, 1453
. : milestone, 1441,
appsec (2.264 ms) : 2223, 2305
. : milestone, 2264,
iast (2.014 ms) : 1964, 2064
. : milestone, 2014,
iast_GLOBAL (2.064 ms) : 2013, 2115
. : milestone, 2064,
profiling (1.892 ms) : 1852, 1931
. : milestone, 1892,
tracing (1.873 ms) : 1834, 1911
. : milestone, 1873,
section candidate
no_agent (1.443 ms) : 1432, 1455
. : milestone, 1443,
appsec (2.254 ms) : 2214, 2295
. : milestone, 2254,
iast (2.001 ms) : 1953, 2049
. : milestone, 2001,
iast_GLOBAL (2.082 ms) : 2031, 2134
. : milestone, 2082,
profiling (1.904 ms) : 1864, 1944
. : milestone, 1904,
tracing (1.87 ms) : 1832, 1907
. : milestone, 1870,
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'm don't have a strong opinion but seems that we should block this until all the stackTrace report vía metastruct with different products will be clarified... Although it's true that there is an optional field in the RFC that we missed in the APPSEC implementation
What Does This Do
This add a field to the StackTraceEvent where we can add the type of the event. That field was specified as optional in the RFC of Exploit Prevention for ASM Libraries. As the implementation before was only for RASP it wasn't needed. Next, we are going to add a new type that will be for IAST and we will need to have this field to identify the EVENT_TYPE.
Motivation
We were missing this optional value
Additional Notes
RFC that contains the event schema --> [RFC] Exploit prevention in the ASM libraries
Contributor Checklist
type:
and (comp:
orinst:
) labels in addition to any usefull labelsclose
,fix
or any linking keywords when referencing an issue.Use
solves
instead, and assign the PR milestone to the issueJira ticket: APPSEC-11649