search

DataDog / dd-trace-java

Datadog APM client for Java
https://docs.datadoghq.com/tracing/languages/java
Apache License 2.0
573 stars 284 forks source link

Fix Exploit Prevention capability announcement on remote config #7586

Closed smola closed 2 weeks ago

smola commented 3 weeks ago

What Does This Do

Fix Exploit Prevention (aka RASP) capability announcement for remote configuration. For v1.39.0, this has been addressed in the backend with a capability override. For v1.40.0+, we'll properly announce the capabilities, including not announcing them if the user sets DD_APPSEC_RASP_ENABLED=false.

Motivation

Additional Notes

Contributor Checklist

pr-commenter[bot] commented 2 weeks ago

Benchmarks

Startup

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master smola/rasp-capabilities
git_commit_date 1725890539 1725897861
git_commit_sha 1d59e612a6 2494e8ac61
release_version 1.40.0-SNAPSHOT~1d59e612a6 1.40.0-SNAPSHOT~2494e8ac61
See matching parameters | |Baseline |Candidate | |---------------------|----------------------------------------------|----------------------------------------------| |application |insecure-bank |insecure-bank | |ci_job_date |1725900124 |1725900124 | |ci_job_id |632303231 |632303231 | |ci_pipeline_id|43878318 |43878318 | |cpu_model |Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz|Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz| |module |Agent |Agent | |parent |None |None | |variant |iast |iast |

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 48 metrics, 15 unstable metrics.

Startup time reports for insecure-bank ```mermaid gantt title insecure-bank - global startup overhead: candidate=1.40.0-SNAPSHOT~2494e8ac61, baseline=1.40.0-SNAPSHOT~1d59e612a6 dateFormat X axisFormat %s section tracing Agent [baseline] (1.051 s) : 0, 1051430 Total [baseline] (8.512 s) : 0, 8512075 Agent [candidate] (1.053 s) : 0, 1052622 Total [candidate] (8.499 s) : 0, 8498799 section iast Agent [baseline] (1.174 s) : 0, 1173549 Total [baseline] (8.995 s) : 0, 8994605 Agent [candidate] (1.183 s) : 0, 1182898 Total [candidate] (8.978 s) : 0, 8978447 section iast_HARDCODED_SECRET_DISABLED Agent [baseline] (1.173 s) : 0, 1173165 Total [baseline] (8.941 s) : 0, 8940858 Agent [candidate] (1.183 s) : 0, 1183488 Total [candidate] (8.944 s) : 0, 8943982 section iast_TELEMETRY_OFF Agent [baseline] (1.172 s) : 0, 1171863 Total [baseline] (8.966 s) : 0, 8965967 Agent [candidate] (1.178 s) : 0, 1178496 Total [candidate] (8.989 s) : 0, 8989425 ``` * **baseline** results |Module|Variant|Duration|Δ tracing| |---|---|---|---| |Agent|tracing|1.051 s |-| |Agent|iast|1.174 s |122.119 ms (11.6%)| |Agent|iast_HARDCODED_SECRET_DISABLED|1.173 s |121.735 ms (11.6%)| |Agent|iast_TELEMETRY_OFF|1.172 s |120.433 ms (11.5%)| |Total|tracing|8.512 s |-| |Total|iast|8.995 s |482.53 ms (5.7%)| |Total|iast_HARDCODED_SECRET_DISABLED|8.941 s |428.783 ms (5.0%)| |Total|iast_TELEMETRY_OFF|8.966 s |453.892 ms (5.3%)| * **candidate** results |Module|Variant|Duration|Δ tracing| |---|---|---|---| |Agent|tracing|1.053 s |-| |Agent|iast|1.183 s |130.276 ms (12.4%)| |Agent|iast_HARDCODED_SECRET_DISABLED|1.183 s |130.866 ms (12.4%)| |Agent|iast_TELEMETRY_OFF|1.178 s |125.873 ms (12.0%)| |Total|tracing|8.499 s |-| |Total|iast|8.978 s |479.648 ms (5.6%)| |Total|iast_HARDCODED_SECRET_DISABLED|8.944 s |445.183 ms (5.2%)| |Total|iast_TELEMETRY_OFF|8.989 s |490.626 ms (5.8%)| ```mermaid gantt title insecure-bank - break down per module: candidate=1.40.0-SNAPSHOT~2494e8ac61, baseline=1.40.0-SNAPSHOT~1d59e612a6 dateFormat X axisFormat %s section tracing BytebuddyAgent [baseline] (670.751 ms) : 0, 670751 BytebuddyAgent [candidate] (671.808 ms) : 0, 671808 GlobalTracer [baseline] (307.868 ms) : 0, 307868 GlobalTracer [candidate] (307.674 ms) : 0, 307674 AppSec [baseline] (51.101 ms) : 0, 51101 AppSec [candidate] (51.338 ms) : 0, 51338 Remote Config [baseline] (684.604 µs) : 0, 685 Remote Config [candidate] (684.558 µs) : 0, 685 Telemetry [baseline] (7.478 ms) : 0, 7478 Telemetry [candidate] (7.549 ms) : 0, 7549 section iast BytebuddyAgent [baseline] (780.783 ms) : 0, 780783 BytebuddyAgent [candidate] (787.108 ms) : 0, 787108 GlobalTracer [baseline] (295.398 ms) : 0, 295398 GlobalTracer [candidate] (297.962 ms) : 0, 297962 AppSec [baseline] (53.954 ms) : 0, 53954 AppSec [candidate] (54.271 ms) : 0, 54271 IAST [baseline] (21.795 ms) : 0, 21795 IAST [candidate] (21.854 ms) : 0, 21854 Remote Config [baseline] (645.258 µs) : 0, 645 Remote Config [candidate] (624.331 µs) : 0, 624 Telemetry [baseline] (7.391 ms) : 0, 7391 Telemetry [candidate] (7.39 ms) : 0, 7390 section iast_HARDCODED_SECRET_DISABLED BytebuddyAgent [baseline] (779.343 ms) : 0, 779343 BytebuddyAgent [candidate] (787.339 ms) : 0, 787339 GlobalTracer [baseline] (295.947 ms) : 0, 295947 GlobalTracer [candidate] (298.746 ms) : 0, 298746 AppSec [baseline] (53.016 ms) : 0, 53016 AppSec [candidate] (51.628 ms) : 0, 51628 IAST [baseline] (21.835 ms) : 0, 21835 IAST [candidate] (22.624 ms) : 0, 22624 Remote Config [baseline] (611.42 µs) : 0, 611 Remote Config [candidate] (591.97 µs) : 0, 592 Telemetry [baseline] (8.816 ms) : 0, 8816 Telemetry [candidate] (8.858 ms) : 0, 8858 section iast_TELEMETRY_OFF BytebuddyAgent [baseline] (778.608 ms) : 0, 778608 BytebuddyAgent [candidate] (782.773 ms) : 0, 782773 GlobalTracer [baseline] (295.672 ms) : 0, 295672 GlobalTracer [candidate] (297.718 ms) : 0, 297718 AppSec [baseline] (53.736 ms) : 0, 53736 AppSec [candidate] (52.23 ms) : 0, 52230 IAST [baseline] (21.565 ms) : 0, 21565 IAST [candidate] (24.216 ms) : 0, 24216 Remote Config [baseline] (589.979 µs) : 0, 590 Remote Config [candidate] (589.938 µs) : 0, 590 Telemetry [baseline] (8.079 ms) : 0, 8079 Telemetry [candidate] (7.277 ms) : 0, 7277 ```
Startup time reports for petclinic ```mermaid gantt title petclinic - global startup overhead: candidate=1.40.0-SNAPSHOT~2494e8ac61, baseline=1.40.0-SNAPSHOT~1d59e612a6 dateFormat X axisFormat %s section tracing Agent [baseline] (1.054 s) : 0, 1054057 Total [baseline] (10.442 s) : 0, 10442450 Agent [candidate] (1.058 s) : 0, 1058212 Total [candidate] (10.478 s) : 0, 10477819 section appsec Agent [baseline] (1.183 s) : 0, 1183454 Total [baseline] (10.59 s) : 0, 10590402 Agent [candidate] (1.187 s) : 0, 1186892 Total [candidate] (10.614 s) : 0, 10613968 section iast Agent [baseline] (1.185 s) : 0, 1185147 Total [baseline] (10.841 s) : 0, 10840539 Agent [candidate] (1.183 s) : 0, 1182977 Total [candidate] (10.859 s) : 0, 10859313 section profiling Agent [baseline] (1.271 s) : 0, 1270891 Total [baseline] (10.6 s) : 0, 10599853 Agent [candidate] (1.248 s) : 0, 1247974 Total [candidate] (10.605 s) : 0, 10604958 ``` * **baseline** results |Module|Variant|Duration|Δ tracing| |---|---|---|---| |Agent|tracing|1.054 s |-| |Agent|appsec|1.183 s |129.397 ms (12.3%)| |Agent|iast|1.185 s |131.09 ms (12.4%)| |Agent|profiling|1.271 s |216.834 ms (20.6%)| |Total|tracing|10.442 s |-| |Total|appsec|10.59 s |147.952 ms (1.4%)| |Total|iast|10.841 s |398.089 ms (3.8%)| |Total|profiling|10.6 s |157.403 ms (1.5%)| * **candidate** results |Module|Variant|Duration|Δ tracing| |---|---|---|---| |Agent|tracing|1.058 s |-| |Agent|appsec|1.187 s |128.68 ms (12.2%)| |Agent|iast|1.183 s |124.765 ms (11.8%)| |Agent|profiling|1.248 s |189.762 ms (17.9%)| |Total|tracing|10.478 s |-| |Total|appsec|10.614 s |136.148 ms (1.3%)| |Total|iast|10.859 s |381.494 ms (3.6%)| |Total|profiling|10.605 s |127.139 ms (1.2%)| ```mermaid gantt title petclinic - break down per module: candidate=1.40.0-SNAPSHOT~2494e8ac61, baseline=1.40.0-SNAPSHOT~1d59e612a6 dateFormat X axisFormat %s section tracing BytebuddyAgent [baseline] (672.409 ms) : 0, 672409 BytebuddyAgent [candidate] (674.431 ms) : 0, 674431 GlobalTracer [baseline] (308.284 ms) : 0, 308284 GlobalTracer [candidate] (310.32 ms) : 0, 310320 AppSec [baseline] (51.551 ms) : 0, 51551 AppSec [candidate] (51.658 ms) : 0, 51658 Remote Config [baseline] (685.33 µs) : 0, 685 Remote Config [candidate] (705.749 µs) : 0, 706 Telemetry [baseline] (7.514 ms) : 0, 7514 Telemetry [candidate] (7.488 ms) : 0, 7488 section appsec BytebuddyAgent [baseline] (691.054 ms) : 0, 691054 BytebuddyAgent [candidate] (691.942 ms) : 0, 691942 GlobalTracer [baseline] (300.867 ms) : 0, 300867 GlobalTracer [candidate] (302.092 ms) : 0, 302092 AppSec [baseline] (158.908 ms) : 0, 158908 AppSec [candidate] (160.28 ms) : 0, 160280 Remote Config [baseline] (627.552 µs) : 0, 628 Remote Config [candidate] (629.341 µs) : 0, 629 Telemetry [baseline] (8.539 ms) : 0, 8539 Telemetry [candidate] (8.232 ms) : 0, 8232 IAST [baseline] (19.749 ms) : 0, 19749 IAST [candidate] (20.219 ms) : 0, 20219 section iast BytebuddyAgent [baseline] (788.898 ms) : 0, 788898 BytebuddyAgent [candidate] (787.109 ms) : 0, 787109 GlobalTracer [baseline] (298.252 ms) : 0, 298252 GlobalTracer [candidate] (297.84 ms) : 0, 297840 AppSec [baseline] (51.313 ms) : 0, 51313 AppSec [candidate] (52.913 ms) : 0, 52913 Remote Config [baseline] (657.756 µs) : 0, 658 Remote Config [candidate] (622.796 µs) : 0, 623 Telemetry [baseline] (7.331 ms) : 0, 7331 Telemetry [candidate] (8.107 ms) : 0, 8107 IAST [baseline] (25.007 ms) : 0, 25007 IAST [candidate] (22.702 ms) : 0, 22702 section profiling BytebuddyAgent [baseline] (677.498 ms) : 0, 677498 BytebuddyAgent [candidate] (666.081 ms) : 0, 666081 GlobalTracer [baseline] (396.946 ms) : 0, 396946 GlobalTracer [candidate] (388.578 ms) : 0, 388578 AppSec [baseline] (52.786 ms) : 0, 52786 AppSec [candidate] (52.106 ms) : 0, 52106 Remote Config [baseline] (696.225 µs) : 0, 696 Remote Config [candidate] (680.847 µs) : 0, 681 Telemetry [baseline] (7.509 ms) : 0, 7509 Telemetry [candidate] (7.375 ms) : 0, 7375 ProfilingAgent [baseline] (96.648 ms) : 0, 96648 ProfilingAgent [candidate] (95.314 ms) : 0, 95314 Profiling [baseline] (96.671 ms) : 0, 96671 Profiling [candidate] (95.339 ms) : 0, 95339 ```

Load

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
end_time 2024-09-09T16:12:39 2024-09-09T16:19:27
git_branch master smola/rasp-capabilities
git_commit_date 1725890539 1725897861
git_commit_sha 1d59e612a6 2494e8ac61
release_version 1.40.0-SNAPSHOT~1d59e612a6 1.40.0-SNAPSHOT~2494e8ac61
start_time 2024-09-09T16:12:26 2024-09-09T16:19:14
See matching parameters | |Baseline |Candidate | |---------------------|----------------------------------------------|----------------------------------------------| |application |insecure-bank |insecure-bank | |ci_job_date |1725899111 |1725899111 | |ci_job_id |632303232 |632303232 | |ci_pipeline_id|43878318 |43878318 | |cpu_model |Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz|Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz| |variant |iast |iast |

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 10 metrics, 18 unstable metrics.

Request duration reports for insecure-bank ```mermaid gantt title insecure-bank - request duration [CI 0.99] : candidate=1.40.0-SNAPSHOT~2494e8ac61, baseline=1.40.0-SNAPSHOT~1d59e612a6 dateFormat X axisFormat %s section baseline no_agent (368.103 µs) : 348, 388 . : milestone, 368, iast (483.534 µs) : 461, 506 . : milestone, 484, iast_FULL (547.767 µs) : 527, 569 . : milestone, 548, iast_GLOBAL (505.142 µs) : 483, 528 . : milestone, 505, iast_HARDCODED_SECRET_DISABLED (477.874 µs) : 456, 500 . : milestone, 478, iast_INACTIVE (446.913 µs) : 425, 468 . : milestone, 447, iast_TELEMETRY_OFF (470.773 µs) : 448, 493 . : milestone, 471, tracing (436.957 µs) : 416, 457 . : milestone, 437, section candidate no_agent (360.456 µs) : 341, 380 . : milestone, 360, iast (479.724 µs) : 458, 501 . : milestone, 480, iast_FULL (549.618 µs) : 528, 571 . : milestone, 550, iast_GLOBAL (500.05 µs) : 479, 521 . : milestone, 500, iast_HARDCODED_SECRET_DISABLED (484.989 µs) : 464, 506 . : milestone, 485, iast_INACTIVE (443.606 µs) : 423, 464 . : milestone, 444, iast_TELEMETRY_OFF (474.332 µs) : 451, 497 . : milestone, 474, tracing (436.202 µs) : 416, 457 . : milestone, 436, ``` * **baseline** results |Variant|Request duration [CI 0.99]|Δ no_agent| |---|---|---| |no_agent|368.103 µs [348.246 µs, 387.96 µs]|-| |iast|483.534 µs [461.431 µs, 505.636 µs]|115.431 µs (31.4%)| |iast_FULL|547.767 µs [526.656 µs, 568.878 µs]|179.665 µs (48.8%)| |iast_GLOBAL|505.142 µs [482.723 µs, 527.562 µs]|137.04 µs (37.2%)| |iast_HARDCODED_SECRET_DISABLED|477.874 µs [455.57 µs, 500.178 µs]|109.771 µs (29.8%)| |iast_INACTIVE|446.913 µs [425.425 µs, 468.401 µs]|78.81 µs (21.4%)| |iast_TELEMETRY_OFF|470.773 µs [448.294 µs, 493.253 µs]|102.671 µs (27.9%)| |tracing|436.957 µs [416.445 µs, 457.468 µs]|68.854 µs (18.7%)| * **candidate** results |Variant|Request duration [CI 0.99]|Δ no_agent| |---|---|---| |no_agent|360.456 µs [341.056 µs, 379.857 µs]|-| |iast|479.724 µs [458.161 µs, 501.287 µs]|119.268 µs (33.1%)| |iast_FULL|549.618 µs [528.457 µs, 570.778 µs]|189.161 µs (52.5%)| |iast_GLOBAL|500.05 µs [478.985 µs, 521.114 µs]|139.593 µs (38.7%)| |iast_HARDCODED_SECRET_DISABLED|484.989 µs [463.642 µs, 506.335 µs]|124.532 µs (34.5%)| |iast_INACTIVE|443.606 µs [422.872 µs, 464.341 µs]|83.15 µs (23.1%)| |iast_TELEMETRY_OFF|474.332 µs [451.27 µs, 497.394 µs]|113.876 µs (31.6%)| |tracing|436.202 µs [415.67 µs, 456.733 µs]|75.745 µs (21.0%)|
Request duration reports for petclinic ```mermaid gantt title petclinic - request duration [CI 0.99] : candidate=1.40.0-SNAPSHOT~2494e8ac61, baseline=1.40.0-SNAPSHOT~1d59e612a6 dateFormat X axisFormat %s section baseline no_agent (1.353 ms) : 1334, 1372 . : milestone, 1353, appsec (1.717 ms) : 1693, 1742 . : milestone, 1717, appsec_no_iast (1.747 ms) : 1723, 1771 . : milestone, 1747, iast (1.484 ms) : 1461, 1506 . : milestone, 1484, profiling (1.476 ms) : 1453, 1500 . : milestone, 1476, tracing (1.466 ms) : 1442, 1491 . : milestone, 1466, section candidate no_agent (1.338 ms) : 1319, 1357 . : milestone, 1338, appsec (1.739 ms) : 1715, 1764 . : milestone, 1739, appsec_no_iast (1.713 ms) : 1688, 1737 . : milestone, 1713, iast (1.47 ms) : 1448, 1493 . : milestone, 1470, profiling (1.474 ms) : 1452, 1497 . : milestone, 1474, tracing (1.458 ms) : 1433, 1482 . : milestone, 1458, ``` * **baseline** results |Variant|Request duration [CI 0.99]|Δ no_agent| |---|---|---| |no_agent|1.353 ms [1.334 ms, 1.372 ms]|-| |appsec|1.717 ms [1.693 ms, 1.742 ms]|364.451 µs (26.9%)| |appsec_no_iast|1.747 ms [1.723 ms, 1.771 ms]|394.162 µs (29.1%)| |iast|1.484 ms [1.461 ms, 1.506 ms]|130.593 µs (9.7%)| |profiling|1.476 ms [1.453 ms, 1.5 ms]|123.431 µs (9.1%)| |tracing|1.466 ms [1.442 ms, 1.491 ms]|113.276 µs (8.4%)| * **candidate** results |Variant|Request duration [CI 0.99]|Δ no_agent| |---|---|---| |no_agent|1.338 ms [1.319 ms, 1.357 ms]|-| |appsec|1.739 ms [1.715 ms, 1.764 ms]|401.478 µs (30.0%)| |appsec_no_iast|1.713 ms [1.688 ms, 1.737 ms]|375.027 µs (28.0%)| |iast|1.47 ms [1.448 ms, 1.493 ms]|132.7 µs (9.9%)| |profiling|1.474 ms [1.452 ms, 1.497 ms]|136.49 µs (10.2%)| |tracing|1.458 ms [1.433 ms, 1.482 ms]|120.239 µs (9.0%)|

Dacapo

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master smola/rasp-capabilities
git_commit_date 1725890539 1725897861
git_commit_sha 1d59e612a6 2494e8ac61
release_version 1.40.0-SNAPSHOT~1d59e612a6 1.40.0-SNAPSHOT~2494e8ac61
See matching parameters | |Baseline |Candidate | |---------------------|----------------------------------------------|----------------------------------------------| |application |biojava |biojava | |ci_job_date |1725899627 |1725899627 | |ci_job_id |632303233 |632303233 | |ci_pipeline_id|43878318 |43878318 | |cpu_model |Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz|Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz| |variant |appsec |appsec |

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 12 metrics, 0 unstable metrics.

Execution time for tomcat ```mermaid gantt title tomcat - execution time [CI 0.99] : candidate=1.40.0-SNAPSHOT~2494e8ac61, baseline=1.40.0-SNAPSHOT~1d59e612a6 dateFormat X axisFormat %s section baseline no_agent (1.465 ms) : 1454, 1477 . : milestone, 1465, appsec (2.23 ms) : 2195, 2265 . : milestone, 2230, iast (1.978 ms) : 1935, 2021 . : milestone, 1978, iast_GLOBAL (2.033 ms) : 1989, 2078 . : milestone, 2033, profiling (1.857 ms) : 1823, 1891 . : milestone, 1857, tracing (1.849 ms) : 1816, 1883 . : milestone, 1849, section candidate no_agent (1.458 ms) : 1446, 1469 . : milestone, 1458, appsec (2.24 ms) : 2205, 2276 . : milestone, 2240, iast (1.987 ms) : 1945, 2030 . : milestone, 1987, iast_GLOBAL (2.019 ms) : 1976, 2063 . : milestone, 2019, profiling (1.873 ms) : 1837, 1909 . : milestone, 1873, tracing (1.844 ms) : 1811, 1877 . : milestone, 1844, ``` * **baseline** results |Variant|Execution Time [CI 0.99]|Δ no_agent| |---|---|---| |no_agent|1.465 ms [1.454 ms, 1.477 ms]|-| |appsec|2.23 ms [2.195 ms, 2.265 ms]|764.788 µs (52.2%)| |iast|1.978 ms [1.935 ms, 2.021 ms]|512.956 µs (35.0%)| |iast_GLOBAL|2.033 ms [1.989 ms, 2.078 ms]|568.302 µs (38.8%)| |profiling|1.857 ms [1.823 ms, 1.891 ms]|391.672 µs (26.7%)| |tracing|1.849 ms [1.816 ms, 1.883 ms]|384.439 µs (26.2%)| * **candidate** results |Variant|Execution Time [CI 0.99]|Δ no_agent| |---|---|---| |no_agent|1.458 ms [1.446 ms, 1.469 ms]|-| |appsec|2.24 ms [2.205 ms, 2.276 ms]|782.651 µs (53.7%)| |iast|1.987 ms [1.945 ms, 2.03 ms]|529.609 µs (36.3%)| |iast_GLOBAL|2.019 ms [1.976 ms, 2.063 ms]|561.544 µs (38.5%)| |profiling|1.873 ms [1.837 ms, 1.909 ms]|414.927 µs (28.5%)| |tracing|1.844 ms [1.811 ms, 1.877 ms]|386.487 µs (26.5%)|
Execution time for biojava ```mermaid gantt title biojava - execution time [CI 0.99] : candidate=1.40.0-SNAPSHOT~2494e8ac61, baseline=1.40.0-SNAPSHOT~1d59e612a6 dateFormat X axisFormat %s section baseline no_agent (15.429 s) : 15429000, 15429000 . : milestone, 15429000, appsec (15.376 s) : 15376000, 15376000 . : milestone, 15376000, iast (18.713 s) : 18713000, 18713000 . : milestone, 18713000, iast_GLOBAL (18.018 s) : 18018000, 18018000 . : milestone, 18018000, profiling (15.09 s) : 15090000, 15090000 . : milestone, 15090000, tracing (14.995 s) : 14995000, 14995000 . : milestone, 14995000, section candidate no_agent (15.022 s) : 15022000, 15022000 . : milestone, 15022000, appsec (15.382 s) : 15382000, 15382000 . : milestone, 15382000, iast (18.927 s) : 18927000, 18927000 . : milestone, 18927000, iast_GLOBAL (17.812 s) : 17812000, 17812000 . : milestone, 17812000, profiling (15.895 s) : 15895000, 15895000 . : milestone, 15895000, tracing (15.261 s) : 15261000, 15261000 . : milestone, 15261000, ``` * **baseline** results |Variant|Execution Time [CI 0.99]|Δ no_agent| |---|---|---| |no_agent|15.429 s [15.429 s, 15.429 s]|-| |appsec|15.376 s [15.376 s, 15.376 s]|-53.0 ms (-0.3%)| |iast|18.713 s [18.713 s, 18.713 s]|3.284 s (21.3%)| |iast_GLOBAL|18.018 s [18.018 s, 18.018 s]|2.589 s (16.8%)| |profiling|15.09 s [15.09 s, 15.09 s]|-339.0 ms (-2.2%)| |tracing|14.995 s [14.995 s, 14.995 s]|-434.0 ms (-2.8%)| * **candidate** results |Variant|Execution Time [CI 0.99]|Δ no_agent| |---|---|---| |no_agent|15.022 s [15.022 s, 15.022 s]|-| |appsec|15.382 s [15.382 s, 15.382 s]|360.0 ms (2.4%)| |iast|18.927 s [18.927 s, 18.927 s]|3.905 s (26.0%)| |iast_GLOBAL|17.812 s [17.812 s, 17.812 s]|2.79 s (18.6%)| |profiling|15.895 s [15.895 s, 15.895 s]|873.0 ms (5.8%)| |tracing|15.261 s [15.261 s, 15.261 s]|239.0 ms (1.6%)|