Attach stacktrace to IAST vulnerabilities #7757

jandro996 · 2024-10-11T11:15:05Z

What Does This Do

Rework current stack trace utilities for RASP to:

Be accesible for IAST ( and other product in the future)
Add missing fields and highlight if they are optional
Replace the FlattenerObject strategy for the MsgPackWriter to avoid double serialisation

Be able to retrieve the metastruct map to share it between different products simultaneously

Add stack trace to IAST vulnerabilities

Add more tests

JIRA: APPSEC-11649

Motivation

Give more context to the source code vulnerabilities by adding the stack trace

Additional Notes

StackTraceEvent schema:

{
EVENT_CATEGORY: [
{
"type": EVENT_TYPE
(optional),
"language": (php|nodejs|java|dotnet|go|python|ruby|cpp|...) (optional),
"id": <string: UUID of the stack trace> (optional),
"message": <string: generic message> (optional),
"frames": [ STACK_FRAME ]
}
]
}

StackTraceFrameschema:

{
"id": <unsigned integer: index of the stack frame (0 = top of stack)>,
"text": <string: raw stack frame> (optional),
"file": (optional),
"line": (optional),
"column": (optional),
"namespace": (optional),
"class_name": (optional),
"function": (optional),
}

Contributor Checklist

Format the title according the contribution guidelines
Assign the type: and (comp: or inst:) labels in addition to any usefull labels
Squash your commits prior merging or merge using GitHub's Squash and merge
Don't use close, fix or any linking keywords when referencing an issue.
Use solves instead, and assign the PR milestone to the issue
Update the public documentation in case of new configuration flag or behavior

Jira ticket: APPSEC-11649

communication/src/main/java/datadog/communication/serialization/Codec.java

communication/src/test/java/datadog/communication/serialization/msgpack/MsgPackWriterTest.java

dd-java-agent/agent-iast/src/test/groovy/com/datadog/iast/ReporterTest.groovy

dd-java-agent/appsec/src/main/java/com/datadog/appsec/gateway/GatewayBridge.java

pr-commenter · 2024-10-11T11:53:27Z

Benchmarks

Startup

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	alejandro.gonzalez/add-stacktrace-to-iast-vulns
git_commit_date	1729797010	1729844144
git_commit_sha	`ec5eedc`	`57a353b`
release_version	1.42.0-SNAPSHOT~ec5eedcf29	1.42.0-SNAPSHOT~57a353bb4a

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1729846656	1729846656
ci_job_id	684103103	684103103
ci_pipeline_id	47420884	47420884
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
module	Agent	Agent
parent	None	None
variant	iast	iast

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 54 metrics, 9 unstable metrics.

Startup time reports for insecure-bank

gantt
    title insecure-bank - global startup overhead: candidate=1.42.0-SNAPSHOT~57a353bb4a, baseline=1.42.0-SNAPSHOT~ec5eedcf29

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.087 s) : 0, 1086945
Total [baseline] (8.598 s) : 0, 8597752
Agent [candidate] (1.088 s) : 0, 1088191
Total [candidate] (8.641 s) : 0, 8640602
section iast
Agent [baseline] (1.201 s) : 0, 1201442
Total [baseline] (9.141 s) : 0, 9141369
Agent [candidate] (1.204 s) : 0, 1204240
Total [candidate] (9.128 s) : 0, 9127991
section iast_HARDCODED_SECRET_DISABLED
Agent [baseline] (1.21 s) : 0, 1210048
Total [baseline] (9.094 s) : 0, 9093717
Agent [candidate] (1.204 s) : 0, 1204129
Total [candidate] (9.136 s) : 0, 9136219
section iast_TELEMETRY_OFF
Agent [baseline] (1.212 s) : 0, 1212389
Total [baseline] (9.159 s) : 0, 9159389
Agent [candidate] (1.203 s) : 0, 1203402
Total [candidate] (9.119 s) : 0, 9118663

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.087 s	-
Agent	iast	1.201 s	114.497 ms (10.5%)
Agent	iast_HARDCODED_SECRET_DISABLED	1.21 s	123.103 ms (11.3%)
Agent	iast_TELEMETRY_OFF	1.212 s	125.444 ms (11.5%)
Total	tracing	8.598 s	-
Total	iast	9.141 s	543.617 ms (6.3%)
Total	iast_HARDCODED_SECRET_DISABLED	9.094 s	495.966 ms (5.8%)
Total	iast_TELEMETRY_OFF	9.159 s	561.638 ms (6.5%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.088 s	-
Agent	iast	1.204 s	116.05 ms (10.7%)
Agent	iast_HARDCODED_SECRET_DISABLED	1.204 s	115.938 ms (10.7%)
Agent	iast_TELEMETRY_OFF	1.203 s	115.212 ms (10.6%)
Total	tracing	8.641 s	-
Total	iast	9.128 s	487.389 ms (5.6%)
Total	iast_HARDCODED_SECRET_DISABLED	9.136 s	495.617 ms (5.7%)
Total	iast_TELEMETRY_OFF	9.119 s	478.06 ms (5.5%)

gantt
    title insecure-bank - break down per module: candidate=1.42.0-SNAPSHOT~57a353bb4a, baseline=1.42.0-SNAPSHOT~ec5eedcf29

    dateFormat X
    axisFormat %s
section tracing
BytebuddyAgent [baseline] (692.003 ms) : 0, 692003
BytebuddyAgent [candidate] (692.01 ms) : 0, 692010
GlobalTracer [baseline] (315.723 ms) : 0, 315723
GlobalTracer [candidate] (317.893 ms) : 0, 317893
AppSec [baseline] (54.207 ms) : 0, 54207
AppSec [candidate] (54.665 ms) : 0, 54665
Remote Config [baseline] (659.786 µs) : 0, 660
Remote Config [candidate] (665.587 µs) : 0, 666
Telemetry [baseline] (10.579 ms) : 0, 10579
Telemetry [candidate] (9.192 ms) : 0, 9192
section iast
BytebuddyAgent [baseline] (800.55 ms) : 0, 800550
BytebuddyAgent [candidate] (801.628 ms) : 0, 801628
GlobalTracer [baseline] (301.892 ms) : 0, 301892
GlobalTracer [candidate] (304.007 ms) : 0, 304007
AppSec [baseline] (56.302 ms) : 0, 56302
AppSec [candidate] (56.493 ms) : 0, 56493
IAST [baseline] (21.014 ms) : 0, 21014
IAST [candidate] (20.551 ms) : 0, 20551
Remote Config [baseline] (588.884 µs) : 0, 589
Remote Config [candidate] (597.552 µs) : 0, 598
Telemetry [baseline] (7.404 ms) : 0, 7404
Telemetry [candidate] (7.289 ms) : 0, 7289
section iast_HARDCODED_SECRET_DISABLED
BytebuddyAgent [baseline] (806.657 ms) : 0, 806657
BytebuddyAgent [candidate] (801.323 ms) : 0, 801323
GlobalTracer [baseline] (303.947 ms) : 0, 303947
GlobalTracer [candidate] (304.103 ms) : 0, 304103
AppSec [baseline] (55.858 ms) : 0, 55858
AppSec [candidate] (57.212 ms) : 0, 57212
IAST [baseline] (21.844 ms) : 0, 21844
IAST [candidate] (19.823 ms) : 0, 19823
Remote Config [baseline] (596.642 µs) : 0, 597
Remote Config [candidate] (604.453 µs) : 0, 604
Telemetry [baseline] (7.417 ms) : 0, 7417
Telemetry [candidate] (7.45 ms) : 0, 7450
section iast_TELEMETRY_OFF
BytebuddyAgent [baseline] (805.605 ms) : 0, 805605
BytebuddyAgent [candidate] (799.891 ms) : 0, 799891
GlobalTracer [baseline] (306.371 ms) : 0, 306371
GlobalTracer [candidate] (304.749 ms) : 0, 304749
AppSec [baseline] (58.035 ms) : 0, 58035
AppSec [candidate] (56.573 ms) : 0, 56573
IAST [baseline] (20.539 ms) : 0, 20539
IAST [candidate] (20.51 ms) : 0, 20510
Remote Config [baseline] (632.965 µs) : 0, 633
Remote Config [candidate] (615.098 µs) : 0, 615
Telemetry [baseline] (7.455 ms) : 0, 7455
Telemetry [candidate] (7.355 ms) : 0, 7355

Startup time reports for petclinic

gantt
    title petclinic - global startup overhead: candidate=1.42.0-SNAPSHOT~57a353bb4a, baseline=1.42.0-SNAPSHOT~ec5eedcf29

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.079 s) : 0, 1078661
Total [baseline] (10.408 s) : 0, 10408081
Agent [candidate] (1.088 s) : 0, 1087729
Total [candidate] (10.501 s) : 0, 10500569
section appsec
Agent [baseline] (1.226 s) : 0, 1225613
Total [baseline] (10.634 s) : 0, 10633752
Agent [candidate] (1.212 s) : 0, 1212471
Total [candidate] (10.651 s) : 0, 10650960
section iast
Agent [baseline] (1.204 s) : 0, 1204485
Total [baseline] (10.867 s) : 0, 10867129
Agent [candidate] (1.214 s) : 0, 1214154
Total [candidate] (10.908 s) : 0, 10907577
section profiling
Agent [baseline] (1.274 s) : 0, 1273571
Total [baseline] (10.747 s) : 0, 10746947
Agent [candidate] (1.282 s) : 0, 1281769
Total [candidate] (10.864 s) : 0, 10864104

baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.079 s	-
Agent	appsec	1.226 s	146.952 ms (13.6%)
Agent	iast	1.204 s	125.824 ms (11.7%)
Agent	profiling	1.274 s	194.91 ms (18.1%)
Total	tracing	10.408 s	-
Total	appsec	10.634 s	225.671 ms (2.2%)
Total	iast	10.867 s	459.048 ms (4.4%)
Total	profiling	10.747 s	338.866 ms (3.3%)

candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.088 s	-
Agent	appsec	1.212 s	124.743 ms (11.5%)
Agent	iast	1.214 s	126.425 ms (11.6%)
Agent	profiling	1.282 s	194.041 ms (17.8%)
Total	tracing	10.501 s	-
Total	appsec	10.651 s	150.391 ms (1.4%)
Total	iast	10.908 s	407.007 ms (3.9%)
Total	profiling	10.864 s	363.534 ms (3.5%)

gantt
    title petclinic - break down per module: candidate=1.42.0-SNAPSHOT~57a353bb4a, baseline=1.42.0-SNAPSHOT~ec5eedcf29

    dateFormat X
    axisFormat %s
section tracing
BytebuddyAgent [baseline] (686.939 ms) : 0, 686939
BytebuddyAgent [candidate] (691.342 ms) : 0, 691342
GlobalTracer [baseline] (313.064 ms) : 0, 313064
GlobalTracer [candidate] (317.87 ms) : 0, 317870
AppSec [baseline] (53.874 ms) : 0, 53874
AppSec [candidate] (54.233 ms) : 0, 54233
Remote Config [baseline] (653.21 µs) : 0, 653
Remote Config [candidate] (664.79 µs) : 0, 665
Telemetry [baseline] (10.471 ms) : 0, 10471
Telemetry [candidate] (9.889 ms) : 0, 9889
section appsec
BytebuddyAgent [baseline] (710.977 ms) : 0, 710977
BytebuddyAgent [candidate] (702.567 ms) : 0, 702567
GlobalTracer [baseline] (314.205 ms) : 0, 314205
GlobalTracer [candidate] (312.224 ms) : 0, 312224
AppSec [baseline] (167.829 ms) : 0, 167829
AppSec [candidate] (165.705 ms) : 0, 165705
Remote Config [baseline] (640.559 µs) : 0, 641
Remote Config [candidate] (629.704 µs) : 0, 630
Telemetry [baseline] (8.457 ms) : 0, 8457
Telemetry [candidate] (8.451 ms) : 0, 8451
IAST [baseline] (19.458 ms) : 0, 19458
IAST [candidate] (18.499 ms) : 0, 18499
section iast
BytebuddyAgent [baseline] (802.112 ms) : 0, 802112
BytebuddyAgent [candidate] (808.928 ms) : 0, 808928
GlobalTracer [baseline] (302.961 ms) : 0, 302961
GlobalTracer [candidate] (305.932 ms) : 0, 305932
AppSec [baseline] (55.749 ms) : 0, 55749
AppSec [candidate] (56.666 ms) : 0, 56666
Remote Config [baseline] (599.378 µs) : 0, 599
Remote Config [candidate] (610.03 µs) : 0, 610
Telemetry [baseline] (7.415 ms) : 0, 7415
Telemetry [candidate] (7.388 ms) : 0, 7388
IAST [baseline] (21.985 ms) : 0, 21985
IAST [candidate] (20.861 ms) : 0, 20861
section profiling
ProfilingAgent [baseline] (89.344 ms) : 0, 89344
ProfilingAgent [candidate] (93.035 ms) : 0, 93035
BytebuddyAgent [baseline] (679.878 ms) : 0, 679878
BytebuddyAgent [candidate] (680.879 ms) : 0, 680879
GlobalTracer [baseline] (396.843 ms) : 0, 396843
GlobalTracer [candidate] (401.68 ms) : 0, 401680
AppSec [baseline] (54.132 ms) : 0, 54132
AppSec [candidate] (54.682 ms) : 0, 54682
Remote Config [baseline] (644.483 µs) : 0, 644
Remote Config [candidate] (661.616 µs) : 0, 662
Telemetry [baseline] (14.003 ms) : 0, 14003
Telemetry [candidate] (12.123 ms) : 0, 12123
Profiling [baseline] (89.367 ms) : 0, 89367
Profiling [candidate] (93.059 ms) : 0, 93059

Load

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
end_time	2024-10-25T08:27:05	2024-10-25T08:33:57
git_branch	master	alejandro.gonzalez/add-stacktrace-to-iast-vulns
git_commit_date	1729797010	1729844144
git_commit_sha	`ec5eedc`	`57a353b`
release_version	1.42.0-SNAPSHOT~ec5eedcf29	1.42.0-SNAPSHOT~57a353bb4a
start_time	2024-10-25T08:26:52	2024-10-25T08:33:44

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1729845586	1729845586
ci_job_id	684103105	684103105
ci_pipeline_id	47420884	47420884
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
variant	iast	iast

Summary

Found 0 performance improvements and 1 performance regressions! Performance is the same for 10 metrics, 17 unstable metrics.

scenario	Δ mean http_req_duration	Δ mean throughput	candidate mean http_req_duration	candidate mean throughput	baseline mean http_req_duration	baseline mean throughput
scenario:load:insecure-bank:iast_FULL	worse [+59.108µs; +104.859µs] or [+10.511%; +18.648%]	unstable [-2756.890op/s; +1270.822op/s] or [-39.056%; +18.003%]	644.306µs	6315.789op/s	562.322µs	7058.824op/s

Request duration reports for insecure-bank

gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.42.0-SNAPSHOT~57a353bb4a, baseline=1.42.0-SNAPSHOT~ec5eedcf29
    dateFormat X
    axisFormat %s
section baseline
no_agent (377.004 µs) : 355, 399
.   : milestone, 377,
iast (485.364 µs) : 464, 507
.   : milestone, 485,
iast_FULL (562.322 µs) : 541, 584
.   : milestone, 562,
iast_GLOBAL (519.527 µs) : 498, 541
.   : milestone, 520,
iast_HARDCODED_SECRET_DISABLED (482.962 µs) : 462, 504
.   : milestone, 483,
iast_INACTIVE (451.808 µs) : 431, 473
.   : milestone, 452,
iast_TELEMETRY_OFF (479.348 µs) : 458, 501
.   : milestone, 479,
tracing (442.566 µs) : 422, 463
.   : milestone, 443,
section candidate
no_agent (371.081 µs) : 352, 390
.   : milestone, 371,
iast (486.554 µs) : 465, 508
.   : milestone, 487,
iast_FULL (644.306 µs) : 623, 666
.   : milestone, 644,
iast_GLOBAL (515.793 µs) : 494, 537
.   : milestone, 516,
iast_HARDCODED_SECRET_DISABLED (484.176 µs) : 463, 505
.   : milestone, 484,
iast_INACTIVE (450.301 µs) : 429, 472
.   : milestone, 450,
iast_TELEMETRY_OFF (484.206 µs) : 462, 506
.   : milestone, 484,
tracing (443.311 µs) : 423, 464
.   : milestone, 443,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	377.004 µs [354.778 µs, 399.23 µs]	-
iast	485.364 µs [463.988 µs, 506.74 µs]	108.36 µs (28.7%)
iast_FULL	562.322 µs [541.033 µs, 583.611 µs]	185.318 µs (49.2%)
iast_GLOBAL	519.527 µs [498.314 µs, 540.74 µs]	142.523 µs (37.8%)
iast_HARDCODED_SECRET_DISABLED	482.962 µs [462.038 µs, 503.887 µs]	105.958 µs (28.1%)
iast_INACTIVE	451.808 µs [431.02 µs, 472.597 µs]	74.804 µs (19.8%)
iast_TELEMETRY_OFF	479.348 µs [458.156 µs, 500.539 µs]	102.344 µs (27.1%)
tracing	442.566 µs [421.714 µs, 463.418 µs]	65.562 µs (17.4%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	371.081 µs [351.684 µs, 390.478 µs]	-
iast	486.554 µs [465.036 µs, 508.071 µs]	115.473 µs (31.1%)
iast_FULL	644.306 µs [623.078 µs, 665.533 µs]	273.224 µs (73.6%)
iast_GLOBAL	515.793 µs [494.285 µs, 537.3 µs]	144.712 µs (39.0%)
iast_HARDCODED_SECRET_DISABLED	484.176 µs [463.319 µs, 505.033 µs]	113.095 µs (30.5%)
iast_INACTIVE	450.301 µs [428.758 µs, 471.843 µs]	79.22 µs (21.3%)
iast_TELEMETRY_OFF	484.206 µs [462.302 µs, 506.109 µs]	113.125 µs (30.5%)
tracing	443.311 µs [422.776 µs, 463.846 µs]	72.23 µs (19.5%)

Request duration reports for petclinic

gantt
    title petclinic - request duration [CI 0.99] : candidate=1.42.0-SNAPSHOT~57a353bb4a, baseline=1.42.0-SNAPSHOT~ec5eedcf29
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.346 ms) : 1327, 1365
.   : milestone, 1346,
appsec (1.733 ms) : 1710, 1757
.   : milestone, 1733,
appsec_no_iast (1.743 ms) : 1719, 1768
.   : milestone, 1743,
iast (1.495 ms) : 1472, 1518
.   : milestone, 1495,
profiling (1.488 ms) : 1465, 1511
.   : milestone, 1488,
tracing (1.455 ms) : 1430, 1479
.   : milestone, 1455,
section candidate
no_agent (1.33 ms) : 1312, 1349
.   : milestone, 1330,
appsec (1.736 ms) : 1713, 1760
.   : milestone, 1736,
appsec_no_iast (1.715 ms) : 1690, 1739
.   : milestone, 1715,
iast (1.491 ms) : 1469, 1513
.   : milestone, 1491,
profiling (1.466 ms) : 1443, 1490
.   : milestone, 1466,
tracing (1.476 ms) : 1452, 1500
.   : milestone, 1476,

baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	1.346 ms [1.327 ms, 1.365 ms]	-
appsec	1.733 ms [1.71 ms, 1.757 ms]	387.345 µs (28.8%)
appsec_no_iast	1.743 ms [1.719 ms, 1.768 ms]	397.142 µs (29.5%)
iast	1.495 ms [1.472 ms, 1.518 ms]	149.224 µs (11.1%)
profiling	1.488 ms [1.465 ms, 1.511 ms]	142.251 µs (10.6%)
tracing	1.455 ms [1.43 ms, 1.479 ms]	108.657 µs (8.1%)

candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	1.33 ms [1.312 ms, 1.349 ms]	-
appsec	1.736 ms [1.713 ms, 1.76 ms]	405.94 µs (30.5%)
appsec_no_iast	1.715 ms [1.69 ms, 1.739 ms]	384.106 µs (28.9%)
iast	1.491 ms [1.469 ms, 1.513 ms]	160.271 µs (12.0%)
profiling	1.466 ms [1.443 ms, 1.49 ms]	135.658 µs (10.2%)
tracing	1.476 ms [1.452 ms, 1.5 ms]	145.428 µs (10.9%)

Dacapo

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	alejandro.gonzalez/add-stacktrace-to-iast-vulns
git_commit_date	1729797010	1729844144
git_commit_sha	`ec5eedc`	`57a353b`
release_version	1.42.0-SNAPSHOT~ec5eedcf29	1.42.0-SNAPSHOT~57a353bb4a

See matching parameters

	Baseline	Candidate
application	biojava	biojava
ci_job_date	1729846109	1729846109
ci_job_id	684103106	684103106
ci_pipeline_id	47420884	47420884
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
variant	appsec	appsec

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 12 metrics, 0 unstable metrics.

Execution time for tomcat

gantt
    title tomcat - execution time [CI 0.99] : candidate=1.42.0-SNAPSHOT~57a353bb4a, baseline=1.42.0-SNAPSHOT~ec5eedcf29
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.462 ms) : 1450, 1473
.   : milestone, 1462,
appsec (2.317 ms) : 2276, 2359
.   : milestone, 2317,
iast (2.065 ms) : 2013, 2116
.   : milestone, 2065,
iast_GLOBAL (2.094 ms) : 2042, 2145
.   : milestone, 2094,
profiling (1.941 ms) : 1899, 1983
.   : milestone, 1941,
tracing (1.904 ms) : 1864, 1944
.   : milestone, 1904,
section candidate
no_agent (1.461 ms) : 1449, 1472
.   : milestone, 1461,
appsec (2.327 ms) : 2286, 2368
.   : milestone, 2327,
iast (2.079 ms) : 2027, 2132
.   : milestone, 2079,
iast_GLOBAL (2.106 ms) : 2054, 2158
.   : milestone, 2106,
profiling (1.929 ms) : 1888, 1970
.   : milestone, 1929,
tracing (1.91 ms) : 1870, 1949
.   : milestone, 1910,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.462 ms [1.45 ms, 1.473 ms]	-
appsec	2.317 ms [2.276 ms, 2.359 ms]	855.357 µs (58.5%)
iast	2.065 ms [2.013 ms, 2.116 ms]	602.799 µs (41.2%)
iast_GLOBAL	2.094 ms [2.042 ms, 2.145 ms]	631.914 µs (43.2%)
profiling	1.941 ms [1.899 ms, 1.983 ms]	479.132 µs (32.8%)
tracing	1.904 ms [1.864 ms, 1.944 ms]	442.142 µs (30.2%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.461 ms [1.449 ms, 1.472 ms]	-
appsec	2.327 ms [2.286 ms, 2.368 ms]	866.355 µs (59.3%)
iast	2.079 ms [2.027 ms, 2.132 ms]	618.906 µs (42.4%)
iast_GLOBAL	2.106 ms [2.054 ms, 2.158 ms]	645.673 µs (44.2%)
profiling	1.929 ms [1.888 ms, 1.97 ms]	468.458 µs (32.1%)
tracing	1.91 ms [1.87 ms, 1.949 ms]	449.286 µs (30.8%)

Execution time for biojava

gantt
    title biojava - execution time [CI 0.99] : candidate=1.42.0-SNAPSHOT~57a353bb4a, baseline=1.42.0-SNAPSHOT~ec5eedcf29
    dateFormat X
    axisFormat %s
section baseline
no_agent (14.894 s) : 14894000, 14894000
.   : milestone, 14894000,
appsec (15.26 s) : 15260000, 15260000
.   : milestone, 15260000,
iast (19.454 s) : 19454000, 19454000
.   : milestone, 19454000,
iast_GLOBAL (18.007 s) : 18007000, 18007000
.   : milestone, 18007000,
profiling (15.164 s) : 15164000, 15164000
.   : milestone, 15164000,
tracing (15.055 s) : 15055000, 15055000
.   : milestone, 15055000,
section candidate
no_agent (15.525 s) : 15525000, 15525000
.   : milestone, 15525000,
appsec (15.03 s) : 15030000, 15030000
.   : milestone, 15030000,
iast (19.191 s) : 19191000, 19191000
.   : milestone, 19191000,
iast_GLOBAL (18.5 s) : 18500000, 18500000
.   : milestone, 18500000,
profiling (15.244 s) : 15244000, 15244000
.   : milestone, 15244000,
tracing (15.415 s) : 15415000, 15415000
.   : milestone, 15415000,

baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	14.894 s [14.894 s, 14.894 s]	-
appsec	15.26 s [15.26 s, 15.26 s]	366.0 ms (2.5%)
iast	19.454 s [19.454 s, 19.454 s]	4.56 s (30.6%)
iast_GLOBAL	18.007 s [18.007 s, 18.007 s]	3.113 s (20.9%)
profiling	15.164 s [15.164 s, 15.164 s]	270.0 ms (1.8%)
tracing	15.055 s [15.055 s, 15.055 s]	161.0 ms (1.1%)

candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	15.525 s [15.525 s, 15.525 s]	-
appsec	15.03 s [15.03 s, 15.03 s]	-495.0 ms (-3.2%)
iast	19.191 s [19.191 s, 19.191 s]	3.666 s (23.6%)
iast_GLOBAL	18.5 s [18.5 s, 18.5 s]	2.975 s (19.2%)
profiling	15.244 s [15.244 s, 15.244 s]	-281.0 ms (-1.8%)
tracing	15.415 s [15.415 s, 15.415 s]	-110.0 ms (-0.7%)

…vulns

communication/src/main/java/datadog/communication/serialization/Codec.java

…vulns

…he IastContext

…vulns

internal-api/src/main/java/datadog/trace/util/stacktrace/StackUtils.java

…vulns

communication/src/main/java/datadog/communication/serialization/Codec.java

...t/appsec/src/test/groovy/com/datadog/appsec/gateway/AppSecRequestContextSpecification.groovy

…vulns

First commit - happy path

06a419c