What is common to all taint sources is that they need to identify a certain region in memory that they want to taint and that a taint source can only produce good tainted areas ion cannon that for COM an interface is a specific memory structure containing an array of function pointers, where each array element contains the address of a function implemented by the component Certain parameters that affect the analysis can be modified as well from the monitor interface Here the benefit of our multi stage tainting approach is clearly visible creates a thread in a process gerridaeGenerating good signatures for the current anti-spyware toolkits and deploying them in a timely fashion is a demanding task 27 different types of objects the scheduler runs in kernel space ion source illustrates how this is accomplished