Increase IAST propagation to StringBuffer setLength

[Mariovido]

What Does This Do

This adds the instrumentation to propagate the taint values through the following methods of StringBuffer:

• setLength(int)

Motivation

Increase propagation of StringBuffer methods.

Additional Notes

Contributor Checklist

• Format the title according the contribution guidelines
• Assign the type: and (comp: or inst:) labels in addition to any usefull labels
• Don't use close, fix or any linking keywords when referencing an issue.
  Use solves instead, and assign the PR milestone to the issue
• Update the public documentation in case of new configuration flag or behavior

Jira ticket: APPSEC-55367

[pr-commenter]

Benchmarks

Startup

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	mario.vidal/taint_tracking_string_buffer_set_length
git_commit_date	1734944119	1734949782
git_commit_sha	46b5986	d78ac81
release_version	1.45.0-SNAPSHOT~46b5986f6a	1.45.0-SNAPSHOT~d78ac81020

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1734952281	1734952281
ci_job_id	748074444	748074444
ci_pipeline_id	51723096	51723096
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
module	Agent	Agent
parent	None	None
variant	iast	iast

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 58 metrics, 5 unstable metrics.

Startup time reports for petclinic

gantt
    title petclinic - global startup overhead: candidate=1.45.0-SNAPSHOT~d78ac81020, baseline=1.45.0-SNAPSHOT~46b5986f6a

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.05 s) : 0, 1050402
Total [baseline] (10.368 s) : 0, 10367852
Agent [candidate] (1.053 s) : 0, 1053111
Total [candidate] (10.361 s) : 0, 10360510
section appsec
Agent [baseline] (1.191 s) : 0, 1191104
Total [baseline] (10.743 s) : 0, 10742705
Agent [candidate] (1.187 s) : 0, 1186673
Total [candidate] (10.717 s) : 0, 10717075
section iast
Agent [baseline] (1.177 s) : 0, 1176890
Total [baseline] (10.965 s) : 0, 10964589
Agent [candidate] (1.186 s) : 0, 1186293
Total [candidate] (11.039 s) : 0, 11038879
section profiling
Agent [baseline] (1.274 s) : 0, 1273820
Total [baseline] (10.803 s) : 0, 10802862
Agent [candidate] (1.28 s) : 0, 1279993
Total [candidate] (10.823 s) : 0, 10823012

Loading

• baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.05 s	-
Agent	appsec	1.191 s	140.703 ms (13.4%)
Agent	iast	1.177 s	126.489 ms (12.0%)
Agent	profiling	1.274 s	223.418 ms (21.3%)
Total	tracing	10.368 s	-
Total	appsec	10.743 s	374.853 ms (3.6%)
Total	iast	10.965 s	596.737 ms (5.8%)
Total	profiling	10.803 s	435.01 ms (4.2%)

• candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.053 s	-
Agent	appsec	1.187 s	133.562 ms (12.7%)
Agent	iast	1.186 s	133.183 ms (12.6%)
Agent	profiling	1.28 s	226.882 ms (21.5%)
Total	tracing	10.361 s	-
Total	appsec	10.717 s	356.565 ms (3.4%)
Total	iast	11.039 s	678.368 ms (6.5%)
Total	profiling	10.823 s	462.502 ms (4.5%)

gantt
    title petclinic - break down per module: candidate=1.45.0-SNAPSHOT~d78ac81020, baseline=1.45.0-SNAPSHOT~46b5986f6a

    dateFormat X
    axisFormat %s
section tracing
BytebuddyAgent [baseline] (710.707 ms) : 0, 710707
BytebuddyAgent [candidate] (711.834 ms) : 0, 711834
GlobalTracer [baseline] (254.947 ms) : 0, 254947
GlobalTracer [candidate] (255.864 ms) : 0, 255864
AppSec [baseline] (57.137 ms) : 0, 57137
AppSec [candidate] (58.601 ms) : 0, 58601
Remote Config [baseline] (698.023 µs) : 0, 698
Remote Config [candidate] (686.877 µs) : 0, 687
Telemetry [baseline] (12.024 ms) : 0, 12024
Telemetry [candidate] (11.111 ms) : 0, 11111
section appsec
BytebuddyAgent [baseline] (732.878 ms) : 0, 732878
BytebuddyAgent [candidate] (729.997 ms) : 0, 729997
GlobalTracer [baseline] (253.282 ms) : 0, 253282
GlobalTracer [candidate] (252.793 ms) : 0, 252793
AppSec [baseline] (171.659 ms) : 0, 171659
AppSec [candidate] (170.241 ms) : 0, 170241
Remote Config [baseline] (672.252 µs) : 0, 672
Remote Config [candidate] (655.681 µs) : 0, 656
Telemetry [baseline] (8.034 ms) : 0, 8034
Telemetry [candidate] (8.299 ms) : 0, 8299
IAST [baseline] (19.274 ms) : 0, 19274
IAST [candidate] (19.439 ms) : 0, 19439
section iast
BytebuddyAgent [baseline] (826.518 ms) : 0, 826518
BytebuddyAgent [candidate] (835.255 ms) : 0, 835255
GlobalTracer [baseline] (246.85 ms) : 0, 246850
GlobalTracer [candidate] (247.767 ms) : 0, 247767
AppSec [baseline] (58.032 ms) : 0, 58032
AppSec [candidate] (57.917 ms) : 0, 57917
Remote Config [baseline] (669.259 µs) : 0, 669
Remote Config [candidate] (661.021 µs) : 0, 661
Telemetry [baseline] (8.471 ms) : 0, 8471
Telemetry [candidate] (8.501 ms) : 0, 8501
IAST [baseline] (21.471 ms) : 0, 21471
IAST [candidate] (21.153 ms) : 0, 21153
section profiling
BytebuddyAgent [baseline] (702.878 ms) : 0, 702878
BytebuddyAgent [candidate] (705.363 ms) : 0, 705363
GlobalTracer [baseline] (370.953 ms) : 0, 370953
GlobalTracer [candidate] (373.269 ms) : 0, 373269
AppSec [baseline] (54.211 ms) : 0, 54211
AppSec [candidate] (54.539 ms) : 0, 54539
Remote Config [baseline] (663.866 µs) : 0, 664
Remote Config [candidate] (658.251 µs) : 0, 658
Telemetry [baseline] (7.884 ms) : 0, 7884
Telemetry [candidate] (8.016 ms) : 0, 8016
ProfilingAgent [baseline] (95.39 ms) : 0, 95390
ProfilingAgent [candidate] (96.159 ms) : 0, 96159
Profiling [baseline] (95.414 ms) : 0, 95414
Profiling [candidate] (96.182 ms) : 0, 96182

Loading

Startup time reports for insecure-bank

gantt
    title insecure-bank - global startup overhead: candidate=1.45.0-SNAPSHOT~d78ac81020, baseline=1.45.0-SNAPSHOT~46b5986f6a

    dateFormat X
    axisFormat %s
section tracing
Agent [baseline] (1.05 s) : 0, 1050017
Total [baseline] (8.582 s) : 0, 8582077
Agent [candidate] (1.049 s) : 0, 1048806
Total [candidate] (8.6 s) : 0, 8599743
section iast
Agent [baseline] (1.189 s) : 0, 1189203
Total [baseline] (9.21 s) : 0, 9209878
Agent [candidate] (1.179 s) : 0, 1179449
Total [candidate] (9.169 s) : 0, 9169245
section iast_HARDCODED_SECRET_DISABLED
Agent [baseline] (1.175 s) : 0, 1175215
Total [baseline] (9.189 s) : 0, 9188520
Agent [candidate] (1.177 s) : 0, 1177021
Total [candidate] (9.192 s) : 0, 9191664
section iast_TELEMETRY_OFF
Agent [baseline] (1.17 s) : 0, 1170284
Total [baseline] (9.148 s) : 0, 9148332
Agent [candidate] (1.174 s) : 0, 1173981
Total [candidate] (9.172 s) : 0, 9171739

Loading

• baseline results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.05 s	-
Agent	iast	1.189 s	139.187 ms (13.3%)
Agent	iast_HARDCODED_SECRET_DISABLED	1.175 s	125.199 ms (11.9%)
Agent	iast_TELEMETRY_OFF	1.17 s	120.267 ms (11.5%)
Total	tracing	8.582 s	-
Total	iast	9.21 s	627.801 ms (7.3%)
Total	iast_HARDCODED_SECRET_DISABLED	9.189 s	606.443 ms (7.1%)
Total	iast_TELEMETRY_OFF	9.148 s	566.255 ms (6.6%)

• candidate results

Module	Variant	Duration	Δ tracing
Agent	tracing	1.049 s	-
Agent	iast	1.179 s	130.643 ms (12.5%)
Agent	iast_HARDCODED_SECRET_DISABLED	1.177 s	128.215 ms (12.2%)
Agent	iast_TELEMETRY_OFF	1.174 s	125.175 ms (11.9%)
Total	tracing	8.6 s	-
Total	iast	9.169 s	569.502 ms (6.6%)
Total	iast_HARDCODED_SECRET_DISABLED	9.192 s	591.92 ms (6.9%)
Total	iast_TELEMETRY_OFF	9.172 s	571.996 ms (6.7%)

gantt
    title insecure-bank - break down per module: candidate=1.45.0-SNAPSHOT~d78ac81020, baseline=1.45.0-SNAPSHOT~46b5986f6a

    dateFormat X
    axisFormat %s
section tracing
BytebuddyAgent [baseline] (709.545 ms) : 0, 709545
BytebuddyAgent [candidate] (709.939 ms) : 0, 709939
GlobalTracer [baseline] (255.721 ms) : 0, 255721
GlobalTracer [candidate] (255.742 ms) : 0, 255742
AppSec [baseline] (58.32 ms) : 0, 58320
AppSec [candidate] (56.332 ms) : 0, 56332
Remote Config [baseline] (690.616 µs) : 0, 691
Remote Config [candidate] (683.038 µs) : 0, 683
Telemetry [baseline] (10.941 ms) : 0, 10941
Telemetry [candidate] (11.169 ms) : 0, 11169
section iast
BytebuddyAgent [baseline] (838.795 ms) : 0, 838795
BytebuddyAgent [candidate] (831.279 ms) : 0, 831279
GlobalTracer [baseline] (247.128 ms) : 0, 247128
GlobalTracer [candidate] (245.183 ms) : 0, 245183
AppSec [baseline] (57.581 ms) : 0, 57581
AppSec [candidate] (57.779 ms) : 0, 57779
Remote Config [baseline] (667.93 µs) : 0, 668
Remote Config [candidate] (641.303 µs) : 0, 641
Telemetry [baseline] (8.567 ms) : 0, 8567
Telemetry [candidate] (8.529 ms) : 0, 8529
IAST [baseline] (21.357 ms) : 0, 21357
IAST [candidate] (21.036 ms) : 0, 21036
section iast_HARDCODED_SECRET_DISABLED
BytebuddyAgent [baseline] (826.318 ms) : 0, 826318
BytebuddyAgent [candidate] (827.599 ms) : 0, 827599
GlobalTracer [baseline] (245.826 ms) : 0, 245826
GlobalTracer [candidate] (246.299 ms) : 0, 246299
AppSec [baseline] (58.014 ms) : 0, 58014
AppSec [candidate] (57.87 ms) : 0, 57870
Remote Config [baseline] (656.345 µs) : 0, 656
Remote Config [candidate] (651.062 µs) : 0, 651
Telemetry [baseline] (8.407 ms) : 0, 8407
Telemetry [candidate] (8.484 ms) : 0, 8484
IAST [baseline] (21.178 ms) : 0, 21178
IAST [candidate] (21.155 ms) : 0, 21155
section iast_TELEMETRY_OFF
BytebuddyAgent [baseline] (822.86 ms) : 0, 822860
BytebuddyAgent [candidate] (825.316 ms) : 0, 825316
GlobalTracer [baseline] (245.528 ms) : 0, 245528
GlobalTracer [candidate] (246.316 ms) : 0, 246316
AppSec [baseline] (57.406 ms) : 0, 57406
AppSec [candidate] (57.726 ms) : 0, 57726
Remote Config [baseline] (652.251 µs) : 0, 652
Remote Config [candidate] (635.749 µs) : 0, 636
Telemetry [baseline] (8.345 ms) : 0, 8345
Telemetry [candidate] (8.254 ms) : 0, 8254
IAST [baseline] (20.688 ms) : 0, 20688
IAST [candidate] (20.781 ms) : 0, 20781

Loading

Load

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
end_time	2024-12-23T10:42:03	2024-12-23T10:49:01
git_branch	master	mario.vidal/taint_tracking_string_buffer_set_length
git_commit_date	1734944119	1734949782
git_commit_sha	46b5986	d78ac81
release_version	1.45.0-SNAPSHOT~46b5986f6a	1.45.0-SNAPSHOT~d78ac81020
start_time	2024-12-23T10:41:50	2024-12-23T10:48:47

See matching parameters

	Baseline	Candidate
application	insecure-bank	insecure-bank
ci_job_date	1734951293	1734951293
ci_job_id	748074445	748074445
ci_pipeline_id	51723096	51723096
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
variant	iast	iast

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 11 metrics, 17 unstable metrics.

Request duration reports for insecure-bank

gantt
    title insecure-bank - request duration [CI 0.99] : candidate=1.45.0-SNAPSHOT~d78ac81020, baseline=1.45.0-SNAPSHOT~46b5986f6a
    dateFormat X
    axisFormat %s
section baseline
no_agent (381.373 µs) : 361, 402
.   : milestone, 381,
iast (487.826 µs) : 466, 509
.   : milestone, 488,
iast_FULL (655.098 µs) : 633, 677
.   : milestone, 655,
iast_GLOBAL (516.08 µs) : 495, 537
.   : milestone, 516,
iast_HARDCODED_SECRET_DISABLED (495.311 µs) : 474, 517
.   : milestone, 495,
iast_INACTIVE (454.309 µs) : 433, 475
.   : milestone, 454,
iast_TELEMETRY_OFF (479.888 µs) : 458, 502
.   : milestone, 480,
tracing (447.789 µs) : 427, 469
.   : milestone, 448,
section candidate
no_agent (369.931 µs) : 350, 390
.   : milestone, 370,
iast (489.923 µs) : 468, 511
.   : milestone, 490,
iast_FULL (654.2 µs) : 632, 676
.   : milestone, 654,
iast_GLOBAL (519.696 µs) : 498, 541
.   : milestone, 520,
iast_HARDCODED_SECRET_DISABLED (500.995 µs) : 479, 523
.   : milestone, 501,
iast_INACTIVE (451.809 µs) : 431, 473
.   : milestone, 452,
iast_TELEMETRY_OFF (485.006 µs) : 464, 506
.   : milestone, 485,
tracing (444.859 µs) : 423, 467
.   : milestone, 445,

Loading

• baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	381.373 µs [360.909 µs, 401.837 µs]	-
iast	487.826 µs [466.485 µs, 509.167 µs]	106.453 µs (27.9%)
iast_FULL	655.098 µs [633.398 µs, 676.798 µs]	273.725 µs (71.8%)
iast_GLOBAL	516.08 µs [494.687 µs, 537.474 µs]	134.707 µs (35.3%)
iast_HARDCODED_SECRET_DISABLED	495.311 µs [473.528 µs, 517.095 µs]	113.938 µs (29.9%)
iast_INACTIVE	454.309 µs [433.137 µs, 475.481 µs]	72.936 µs (19.1%)
iast_TELEMETRY_OFF	479.888 µs [458.137 µs, 501.638 µs]	98.515 µs (25.8%)
tracing	447.789 µs [426.845 µs, 468.733 µs]	66.416 µs (17.4%)

• candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	369.931 µs [350.306 µs, 389.557 µs]	-
iast	489.923 µs [468.379 µs, 511.468 µs]	119.992 µs (32.4%)
iast_FULL	654.2 µs [632.494 µs, 675.905 µs]	284.268 µs (76.8%)
iast_GLOBAL	519.696 µs [498.115 µs, 541.276 µs]	149.765 µs (40.5%)
iast_HARDCODED_SECRET_DISABLED	500.995 µs [479.004 µs, 522.986 µs]	131.064 µs (35.4%)
iast_INACTIVE	451.809 µs [430.624 µs, 472.995 µs]	81.878 µs (22.1%)
iast_TELEMETRY_OFF	485.006 µs [463.59 µs, 506.422 µs]	115.075 µs (31.1%)
tracing	444.859 µs [423.005 µs, 466.713 µs]	74.928 µs (20.3%)

Request duration reports for petclinic

gantt
    title petclinic - request duration [CI 0.99] : candidate=1.45.0-SNAPSHOT~d78ac81020, baseline=1.45.0-SNAPSHOT~46b5986f6a
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.363 ms) : 1344, 1383
.   : milestone, 1363,
appsec (1.753 ms) : 1731, 1776
.   : milestone, 1753,
appsec_no_iast (1.742 ms) : 1718, 1767
.   : milestone, 1742,
iast (1.496 ms) : 1472, 1519
.   : milestone, 1496,
profiling (1.519 ms) : 1495, 1544
.   : milestone, 1519,
tracing (1.488 ms) : 1463, 1513
.   : milestone, 1488,
section candidate
no_agent (1.347 ms) : 1327, 1366
.   : milestone, 1347,
appsec (1.753 ms) : 1728, 1778
.   : milestone, 1753,
appsec_no_iast (1.737 ms) : 1712, 1762
.   : milestone, 1737,
iast (1.487 ms) : 1465, 1510
.   : milestone, 1487,
profiling (1.497 ms) : 1473, 1521
.   : milestone, 1497,
tracing (1.498 ms) : 1472, 1524
.   : milestone, 1498,

Loading

• baseline results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	1.363 ms [1.344 ms, 1.383 ms]	-
appsec	1.753 ms [1.731 ms, 1.776 ms]	390.127 µs (28.6%)
appsec_no_iast	1.742 ms [1.718 ms, 1.767 ms]	379.186 µs (27.8%)
iast	1.496 ms [1.472 ms, 1.519 ms]	132.351 µs (9.7%)
profiling	1.519 ms [1.495 ms, 1.544 ms]	155.797 µs (11.4%)
tracing	1.488 ms [1.463 ms, 1.513 ms]	124.42 µs (9.1%)

• candidate results

Variant	Request duration [CI 0.99]	Δ no_agent
no_agent	1.347 ms [1.327 ms, 1.366 ms]	-
appsec	1.753 ms [1.728 ms, 1.778 ms]	406.532 µs (30.2%)
appsec_no_iast	1.737 ms [1.712 ms, 1.762 ms]	390.211 µs (29.0%)
iast	1.487 ms [1.465 ms, 1.51 ms]	140.68 µs (10.4%)
profiling	1.497 ms [1.473 ms, 1.521 ms]	150.131 µs (11.1%)
tracing	1.498 ms [1.472 ms, 1.524 ms]	151.339 µs (11.2%)

Dacapo

Parameters

	Baseline	Candidate
baseline_or_candidate	baseline	candidate
git_branch	master	mario.vidal/taint_tracking_string_buffer_set_length
git_commit_date	1734944119	1734949782
git_commit_sha	46b5986	d78ac81
release_version	1.45.0-SNAPSHOT~46b5986f6a	1.45.0-SNAPSHOT~d78ac81020

See matching parameters

	Baseline	Candidate
application	biojava	biojava
ci_job_date	1734951862	1734951862
ci_job_id	748074446	748074446
ci_pipeline_id	51723096	51723096
cpu_model	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz	Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz
variant	appsec	appsec

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 12 metrics, 0 unstable metrics.

Execution time for tomcat

gantt
    title tomcat - execution time [CI 0.99] : candidate=1.45.0-SNAPSHOT~d78ac81020, baseline=1.45.0-SNAPSHOT~46b5986f6a
    dateFormat X
    axisFormat %s
section baseline
no_agent (1.473 ms) : 1461, 1484
.   : milestone, 1473,
appsec (2.352 ms) : 2310, 2393
.   : milestone, 2352,
iast (2.093 ms) : 2040, 2146
.   : milestone, 2093,
iast_GLOBAL (2.133 ms) : 2080, 2186
.   : milestone, 2133,
profiling (1.965 ms) : 1922, 2007
.   : milestone, 1965,
tracing (1.937 ms) : 1896, 1978
.   : milestone, 1937,
section candidate
no_agent (1.478 ms) : 1467, 1490
.   : milestone, 1478,
appsec (2.349 ms) : 2307, 2390
.   : milestone, 2349,
iast (2.094 ms) : 2041, 2147
.   : milestone, 2094,
iast_GLOBAL (2.141 ms) : 2087, 2194
.   : milestone, 2141,
profiling (1.964 ms) : 1921, 2007
.   : milestone, 1964,
tracing (1.94 ms) : 1900, 1981
.   : milestone, 1940,

Loading

• baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.473 ms [1.461 ms, 1.484 ms]	-
appsec	2.352 ms [2.31 ms, 2.393 ms]	879.006 µs (59.7%)
iast	2.093 ms [2.04 ms, 2.146 ms]	620.03 µs (42.1%)
iast_GLOBAL	2.133 ms [2.08 ms, 2.186 ms]	660.58 µs (44.9%)
profiling	1.965 ms [1.922 ms, 2.007 ms]	492.328 µs (33.4%)
tracing	1.937 ms [1.896 ms, 1.978 ms]	464.265 µs (31.5%)

• candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	1.478 ms [1.467 ms, 1.49 ms]	-
appsec	2.349 ms [2.307 ms, 2.39 ms]	870.577 µs (58.9%)
iast	2.094 ms [2.041 ms, 2.147 ms]	615.803 µs (41.7%)
iast_GLOBAL	2.141 ms [2.087 ms, 2.194 ms]	662.344 µs (44.8%)
profiling	1.964 ms [1.921 ms, 2.007 ms]	485.781 µs (32.9%)
tracing	1.94 ms [1.9 ms, 1.981 ms]	462.004 µs (31.3%)

Execution time for biojava

gantt
    title biojava - execution time [CI 0.99] : candidate=1.45.0-SNAPSHOT~d78ac81020, baseline=1.45.0-SNAPSHOT~46b5986f6a
    dateFormat X
    axisFormat %s
section baseline
no_agent (14.88 s) : 14880000, 14880000
.   : milestone, 14880000,
appsec (15.068 s) : 15068000, 15068000
.   : milestone, 15068000,
iast (19.023 s) : 19023000, 19023000
.   : milestone, 19023000,
iast_GLOBAL (17.632 s) : 17632000, 17632000
.   : milestone, 17632000,
profiling (15.305 s) : 15305000, 15305000
.   : milestone, 15305000,
tracing (14.761 s) : 14761000, 14761000
.   : milestone, 14761000,
section candidate
no_agent (15.21 s) : 15210000, 15210000
.   : milestone, 15210000,
appsec (15.18 s) : 15180000, 15180000
.   : milestone, 15180000,
iast (19.055 s) : 19055000, 19055000
.   : milestone, 19055000,
iast_GLOBAL (17.927 s) : 17927000, 17927000
.   : milestone, 17927000,
profiling (14.924 s) : 14924000, 14924000
.   : milestone, 14924000,
tracing (14.812 s) : 14812000, 14812000
.   : milestone, 14812000,

Loading

• baseline results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	14.88 s [14.88 s, 14.88 s]	-
appsec	15.068 s [15.068 s, 15.068 s]	188.0 ms (1.3%)
iast	19.023 s [19.023 s, 19.023 s]	4.143 s (27.8%)
iast_GLOBAL	17.632 s [17.632 s, 17.632 s]	2.752 s (18.5%)
profiling	15.305 s [15.305 s, 15.305 s]	425.0 ms (2.9%)
tracing	14.761 s [14.761 s, 14.761 s]	-119.0 ms (-0.8%)

• candidate results

Variant	Execution Time [CI 0.99]	Δ no_agent
no_agent	15.21 s [15.21 s, 15.21 s]	-
appsec	15.18 s [15.18 s, 15.18 s]	-30.0 ms (-0.2%)
iast	19.055 s [19.055 s, 19.055 s]	3.845 s (25.3%)
iast_GLOBAL	17.927 s [17.927 s, 17.927 s]	2.717 s (17.9%)
profiling	14.924 s [14.924 s, 14.924 s]	-286.0 ms (-1.9%)
tracing	14.812 s [14.812 s, 14.812 s]	-398.0 ms (-2.6%)