search

DataDog / dd-trace-java

Datadog APM client for Java
https://docs.datadoghq.com/tracing/languages/java
Apache License 2.0
572 stars 284 forks source link

Send IAST vulnerability secure marks to backend #7645

Closed jandro996 closed 3 hours ago

jandro996 commented 1 week ago

What Does This Do

Motivation

Send vulnerability secure marks to allow backend to recalculate vulnerability score

Additional Notes

Contributor Checklist

Jira ticket: APPSEC-54935

pr-commenter[bot] commented 1 week ago

Benchmarks

Startup

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master alejandro.gonzalez/Send-secure-marks-to-backend
git_commit_date 1727340475 1727353553
git_commit_sha 8ee4a5d6dd 0ba963f931
release_version 1.40.0-SNAPSHOT~8ee4a5d6dd 1.40.0-SNAPSHOT~0ba963f931
See matching parameters | |Baseline |Candidate | |---------------------|----------------------------------------------|----------------------------------------------| |application |insecure-bank |insecure-bank | |ci_job_date |1727355960 |1727355960 | |ci_job_id |652531648 |652531648 | |ci_pipeline_id|45204393 |45204393 | |cpu_model |Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz|Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz| |module |Agent |Agent | |parent |None |None | |variant |iast |iast |

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 50 metrics, 13 unstable metrics.

Startup time reports for petclinic ```mermaid gantt title petclinic - global startup overhead: candidate=1.40.0-SNAPSHOT~0ba963f931, baseline=1.40.0-SNAPSHOT~8ee4a5d6dd dateFormat X axisFormat %s section tracing Agent [baseline] (1.065 s) : 0, 1065494 Total [baseline] (10.38 s) : 0, 10380206 Agent [candidate] (1.067 s) : 0, 1067486 Total [candidate] (10.429 s) : 0, 10428546 section appsec Agent [baseline] (1.2 s) : 0, 1200333 Total [baseline] (10.624 s) : 0, 10624226 Agent [candidate] (1.205 s) : 0, 1204595 Total [candidate] (10.688 s) : 0, 10688311 section iast Agent [baseline] (1.191 s) : 0, 1190966 Total [baseline] (10.809 s) : 0, 10809431 Agent [candidate] (1.191 s) : 0, 1190954 Total [candidate] (10.875 s) : 0, 10874683 section profiling Agent [baseline] (1.267 s) : 0, 1267105 Total [baseline] (10.586 s) : 0, 10586330 Agent [candidate] (1.27 s) : 0, 1270400 Total [candidate] (10.651 s) : 0, 10650753 ``` * **baseline** results |Module|Variant|Duration|Δ tracing| |---|---|---|---| |Agent|tracing|1.065 s |-| |Agent|appsec|1.2 s |134.839 ms (12.7%)| |Agent|iast|1.191 s |125.472 ms (11.8%)| |Agent|profiling|1.267 s |201.612 ms (18.9%)| |Total|tracing|10.38 s |-| |Total|appsec|10.624 s |244.02 ms (2.4%)| |Total|iast|10.809 s |429.225 ms (4.1%)| |Total|profiling|10.586 s |206.123 ms (2.0%)| * **candidate** results |Module|Variant|Duration|Δ tracing| |---|---|---|---| |Agent|tracing|1.067 s |-| |Agent|appsec|1.205 s |137.109 ms (12.8%)| |Agent|iast|1.191 s |123.469 ms (11.6%)| |Agent|profiling|1.27 s |202.915 ms (19.0%)| |Total|tracing|10.429 s |-| |Total|appsec|10.688 s |259.764 ms (2.5%)| |Total|iast|10.875 s |446.137 ms (4.3%)| |Total|profiling|10.651 s |222.207 ms (2.1%)| ```mermaid gantt title petclinic - break down per module: candidate=1.40.0-SNAPSHOT~0ba963f931, baseline=1.40.0-SNAPSHOT~8ee4a5d6dd dateFormat X axisFormat %s section tracing BytebuddyAgent [baseline] (679.569 ms) : 0, 679569 BytebuddyAgent [candidate] (680.543 ms) : 0, 680543 GlobalTracer [baseline] (310.19 ms) : 0, 310190 GlobalTracer [candidate] (310.977 ms) : 0, 310977 AppSec [baseline] (53.866 ms) : 0, 53866 AppSec [candidate] (54.058 ms) : 0, 54058 Remote Config [baseline] (662.149 µs) : 0, 662 Remote Config [candidate] (656.186 µs) : 0, 656 Telemetry [baseline] (7.608 ms) : 0, 7608 Telemetry [candidate] (7.633 ms) : 0, 7633 section appsec BytebuddyAgent [baseline] (701.099 ms) : 0, 701099 BytebuddyAgent [candidate] (704.226 ms) : 0, 704226 GlobalTracer [baseline] (303.36 ms) : 0, 303360 GlobalTracer [candidate] (304.492 ms) : 0, 304492 AppSec [baseline] (162.88 ms) : 0, 162880 AppSec [candidate] (161.629 ms) : 0, 161629 IAST [baseline] (19.867 ms) : 0, 19867 IAST [candidate] (22.851 ms) : 0, 22851 Remote Config [baseline] (642.192 µs) : 0, 642 Remote Config [candidate] (657.163 µs) : 0, 657 Telemetry [baseline] (8.823 ms) : 0, 8823 Telemetry [candidate] (8.483 ms) : 0, 8483 section iast BytebuddyAgent [baseline] (792.231 ms) : 0, 792231 BytebuddyAgent [candidate] (792.037 ms) : 0, 792037 GlobalTracer [baseline] (299.292 ms) : 0, 299292 GlobalTracer [candidate] (299.347 ms) : 0, 299347 AppSec [baseline] (54.501 ms) : 0, 54501 AppSec [candidate] (53.833 ms) : 0, 53833 IAST [baseline] (23.646 ms) : 0, 23646 IAST [candidate] (24.36 ms) : 0, 24360 Remote Config [baseline] (618.726 µs) : 0, 619 Remote Config [candidate] (650.535 µs) : 0, 651 Telemetry [baseline] (7.004 ms) : 0, 7004 Telemetry [candidate] (7.033 ms) : 0, 7033 section profiling BytebuddyAgent [baseline] (674.621 ms) : 0, 674621 BytebuddyAgent [candidate] (676.127 ms) : 0, 676127 GlobalTracer [baseline] (394.814 ms) : 0, 394814 GlobalTracer [candidate] (395.911 ms) : 0, 395911 AppSec [baseline] (54.598 ms) : 0, 54598 AppSec [candidate] (54.543 ms) : 0, 54543 Remote Config [baseline] (645.696 µs) : 0, 646 Remote Config [candidate] (655.828 µs) : 0, 656 Telemetry [baseline] (7.398 ms) : 0, 7398 Telemetry [candidate] (7.412 ms) : 0, 7412 ProfilingAgent [baseline] (96.322 ms) : 0, 96322 ProfilingAgent [candidate] (97.099 ms) : 0, 97099 Profiling [baseline] (96.345 ms) : 0, 96345 Profiling [candidate] (97.122 ms) : 0, 97122 ```
Startup time reports for insecure-bank ```mermaid gantt title insecure-bank - global startup overhead: candidate=1.40.0-SNAPSHOT~0ba963f931, baseline=1.40.0-SNAPSHOT~8ee4a5d6dd dateFormat X axisFormat %s section tracing Agent [baseline] (1.071 s) : 0, 1070735 Total [baseline] (8.541 s) : 0, 8541080 Agent [candidate] (1.066 s) : 0, 1065988 Total [candidate] (8.532 s) : 0, 8531860 section iast Agent [baseline] (1.199 s) : 0, 1199117 Total [baseline] (9.057 s) : 0, 9056890 Agent [candidate] (1.191 s) : 0, 1190643 Total [candidate] (9.006 s) : 0, 9005871 section iast_HARDCODED_SECRET_DISABLED Agent [baseline] (1.199 s) : 0, 1199024 Total [baseline] (8.993 s) : 0, 8993461 Agent [candidate] (1.208 s) : 0, 1208388 Total [candidate] (8.988 s) : 0, 8988150 section iast_TELEMETRY_OFF Agent [baseline] (1.189 s) : 0, 1189151 Total [baseline] (9.013 s) : 0, 9012567 Agent [candidate] (1.188 s) : 0, 1188050 Total [candidate] (9.003 s) : 0, 9002812 ``` * **baseline** results |Module|Variant|Duration|Δ tracing| |---|---|---|---| |Agent|tracing|1.071 s |-| |Agent|iast|1.199 s |128.382 ms (12.0%)| |Agent|iast_HARDCODED_SECRET_DISABLED|1.199 s |128.289 ms (12.0%)| |Agent|iast_TELEMETRY_OFF|1.189 s |118.416 ms (11.1%)| |Total|tracing|8.541 s |-| |Total|iast|9.057 s |515.81 ms (6.0%)| |Total|iast_HARDCODED_SECRET_DISABLED|8.993 s |452.381 ms (5.3%)| |Total|iast_TELEMETRY_OFF|9.013 s |471.487 ms (5.5%)| * **candidate** results |Module|Variant|Duration|Δ tracing| |---|---|---|---| |Agent|tracing|1.066 s |-| |Agent|iast|1.191 s |124.655 ms (11.7%)| |Agent|iast_HARDCODED_SECRET_DISABLED|1.208 s |142.4 ms (13.4%)| |Agent|iast_TELEMETRY_OFF|1.188 s |122.063 ms (11.5%)| |Total|tracing|8.532 s |-| |Total|iast|9.006 s |474.011 ms (5.6%)| |Total|iast_HARDCODED_SECRET_DISABLED|8.988 s |456.291 ms (5.3%)| |Total|iast_TELEMETRY_OFF|9.003 s |470.952 ms (5.5%)| ```mermaid gantt title insecure-bank - break down per module: candidate=1.40.0-SNAPSHOT~0ba963f931, baseline=1.40.0-SNAPSHOT~8ee4a5d6dd dateFormat X axisFormat %s section tracing BytebuddyAgent [baseline] (683.234 ms) : 0, 683234 BytebuddyAgent [candidate] (680.013 ms) : 0, 680013 GlobalTracer [baseline] (311.609 ms) : 0, 311609 GlobalTracer [candidate] (310.472 ms) : 0, 310472 AppSec [baseline] (53.921 ms) : 0, 53921 AppSec [candidate] (53.551 ms) : 0, 53551 Remote Config [baseline] (665.389 µs) : 0, 665 Remote Config [candidate] (660.274 µs) : 0, 660 Telemetry [baseline] (7.654 ms) : 0, 7654 Telemetry [candidate] (7.648 ms) : 0, 7648 section iast BytebuddyAgent [baseline] (798.005 ms) : 0, 798005 BytebuddyAgent [candidate] (791.752 ms) : 0, 791752 GlobalTracer [baseline] (301.241 ms) : 0, 301241 GlobalTracer [candidate] (299.297 ms) : 0, 299297 AppSec [baseline] (54.208 ms) : 0, 54208 AppSec [candidate] (55.635 ms) : 0, 55635 IAST [baseline] (24.414 ms) : 0, 24414 IAST [candidate] (22.672 ms) : 0, 22672 Remote Config [baseline] (597.627 µs) : 0, 598 Remote Config [candidate] (617.528 µs) : 0, 618 Telemetry [baseline] (6.933 ms) : 0, 6933 Telemetry [candidate] (7.009 ms) : 0, 7009 section iast_HARDCODED_SECRET_DISABLED BytebuddyAgent [baseline] (798.23 ms) : 0, 798230 BytebuddyAgent [candidate] (804.131 ms) : 0, 804131 GlobalTracer [baseline] (300.826 ms) : 0, 300826 GlobalTracer [candidate] (303.724 ms) : 0, 303724 AppSec [baseline] (54.055 ms) : 0, 54055 AppSec [candidate] (56.807 ms) : 0, 56807 IAST [baseline] (24.451 ms) : 0, 24451 IAST [candidate] (21.253 ms) : 0, 21253 Remote Config [baseline] (651.819 µs) : 0, 652 Remote Config [candidate] (623.258 µs) : 0, 623 Telemetry [baseline] (7.048 ms) : 0, 7048 Telemetry [candidate] (7.967 ms) : 0, 7967 section iast_TELEMETRY_OFF BytebuddyAgent [baseline] (789.808 ms) : 0, 789808 BytebuddyAgent [candidate] (789.081 ms) : 0, 789081 GlobalTracer [baseline] (300.07 ms) : 0, 300070 GlobalTracer [candidate] (299.535 ms) : 0, 299535 AppSec [baseline] (55.951 ms) : 0, 55951 AppSec [candidate] (56.111 ms) : 0, 56111 IAST [baseline] (22.164 ms) : 0, 22164 IAST [candidate] (22.123 ms) : 0, 22123 Remote Config [baseline] (599.024 µs) : 0, 599 Remote Config [candidate] (611.027 µs) : 0, 611 Telemetry [baseline] (6.861 ms) : 0, 6861 Telemetry [candidate] (6.897 ms) : 0, 6897 ```

Load

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
end_time 2024-09-26T12:36:34 2024-09-26T12:43:25
git_branch master alejandro.gonzalez/Send-secure-marks-to-backend
git_commit_date 1727340475 1727353553
git_commit_sha 8ee4a5d6dd 0ba963f931
release_version 1.40.0-SNAPSHOT~8ee4a5d6dd 1.40.0-SNAPSHOT~0ba963f931
start_time 2024-09-26T12:36:21 2024-09-26T12:43:12
See matching parameters | |Baseline |Candidate | |---------------------|----------------------------------------------|----------------------------------------------| |application |insecure-bank |insecure-bank | |ci_job_date |1727354952 |1727354952 | |ci_job_id |652531649 |652531649 | |ci_pipeline_id|45204393 |45204393 | |cpu_model |Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz|Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz| |variant |iast |iast |

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 10 metrics, 18 unstable metrics.

Request duration reports for petclinic ```mermaid gantt title petclinic - request duration [CI 0.99] : candidate=1.40.0-SNAPSHOT~0ba963f931, baseline=1.40.0-SNAPSHOT~8ee4a5d6dd dateFormat X axisFormat %s section baseline no_agent (1.337 ms) : 1318, 1357 . : milestone, 1337, appsec (1.737 ms) : 1714, 1760 . : milestone, 1737, appsec_no_iast (1.711 ms) : 1686, 1736 . : milestone, 1711, iast (1.482 ms) : 1459, 1505 . : milestone, 1482, profiling (1.5 ms) : 1475, 1525 . : milestone, 1500, tracing (1.471 ms) : 1447, 1495 . : milestone, 1471, section candidate no_agent (1.339 ms) : 1319, 1358 . : milestone, 1339, appsec (1.724 ms) : 1699, 1748 . : milestone, 1724, appsec_no_iast (1.728 ms) : 1704, 1752 . : milestone, 1728, iast (1.479 ms) : 1455, 1502 . : milestone, 1479, profiling (1.487 ms) : 1464, 1511 . : milestone, 1487, tracing (1.474 ms) : 1450, 1498 . : milestone, 1474, ``` * **baseline** results |Variant|Request duration [CI 0.99]|Δ no_agent| |---|---|---| |no_agent|1.337 ms [1.318 ms, 1.357 ms]|-| |appsec|1.737 ms [1.714 ms, 1.76 ms]|399.433 µs (29.9%)| |appsec_no_iast|1.711 ms [1.686 ms, 1.736 ms]|374.012 µs (28.0%)| |iast|1.482 ms [1.459 ms, 1.505 ms]|145.035 µs (10.8%)| |profiling|1.5 ms [1.475 ms, 1.525 ms]|163.327 µs (12.2%)| |tracing|1.471 ms [1.447 ms, 1.495 ms]|134.057 µs (10.0%)| * **candidate** results |Variant|Request duration [CI 0.99]|Δ no_agent| |---|---|---| |no_agent|1.339 ms [1.319 ms, 1.358 ms]|-| |appsec|1.724 ms [1.699 ms, 1.748 ms]|385.038 µs (28.8%)| |appsec_no_iast|1.728 ms [1.704 ms, 1.752 ms]|389.595 µs (29.1%)| |iast|1.479 ms [1.455 ms, 1.502 ms]|139.768 µs (10.4%)| |profiling|1.487 ms [1.464 ms, 1.511 ms]|148.458 µs (11.1%)| |tracing|1.474 ms [1.45 ms, 1.498 ms]|135.142 µs (10.1%)|
Request duration reports for insecure-bank ```mermaid gantt title insecure-bank - request duration [CI 0.99] : candidate=1.40.0-SNAPSHOT~0ba963f931, baseline=1.40.0-SNAPSHOT~8ee4a5d6dd dateFormat X axisFormat %s section baseline no_agent (374.206 µs) : 355, 394 . : milestone, 374, iast (489.38 µs) : 468, 511 . : milestone, 489, iast_FULL (553.569 µs) : 532, 575 . : milestone, 554, iast_GLOBAL (517.742 µs) : 495, 541 . : milestone, 518, iast_HARDCODED_SECRET_DISABLED (481.77 µs) : 461, 503 . : milestone, 482, iast_INACTIVE (449.913 µs) : 429, 471 . : milestone, 450, iast_TELEMETRY_OFF (471.328 µs) : 449, 494 . : milestone, 471, tracing (436.949 µs) : 417, 457 . : milestone, 437, section candidate no_agent (364.563 µs) : 345, 384 . : milestone, 365, iast (480.134 µs) : 459, 501 . : milestone, 480, iast_FULL (551.722 µs) : 531, 573 . : milestone, 552, iast_GLOBAL (521.448 µs) : 498, 545 . : milestone, 521, iast_HARDCODED_SECRET_DISABLED (483.752 µs) : 462, 505 . : milestone, 484, iast_INACTIVE (447.884 µs) : 427, 469 . : milestone, 448, iast_TELEMETRY_OFF (471.779 µs) : 449, 494 . : milestone, 472, tracing (446.048 µs) : 426, 467 . : milestone, 446, ``` * **baseline** results |Variant|Request duration [CI 0.99]|Δ no_agent| |---|---|---| |no_agent|374.206 µs [354.804 µs, 393.609 µs]|-| |iast|489.38 µs [468.179 µs, 510.58 µs]|115.173 µs (30.8%)| |iast_FULL|553.569 µs [532.319 µs, 574.819 µs]|179.363 µs (47.9%)| |iast_GLOBAL|517.742 µs [494.652 µs, 540.833 µs]|143.536 µs (38.4%)| |iast_HARDCODED_SECRET_DISABLED|481.77 µs [460.871 µs, 502.668 µs]|107.563 µs (28.7%)| |iast_INACTIVE|449.913 µs [428.85 µs, 470.976 µs]|75.706 µs (20.2%)| |iast_TELEMETRY_OFF|471.328 µs [448.691 µs, 493.966 µs]|97.122 µs (26.0%)| |tracing|436.949 µs [416.867 µs, 457.031 µs]|62.742 µs (16.8%)| * **candidate** results |Variant|Request duration [CI 0.99]|Δ no_agent| |---|---|---| |no_agent|364.563 µs [345.055 µs, 384.071 µs]|-| |iast|480.134 µs [459.076 µs, 501.192 µs]|115.571 µs (31.7%)| |iast_FULL|551.722 µs [530.647 µs, 572.796 µs]|187.159 µs (51.3%)| |iast_GLOBAL|521.448 µs [498.308 µs, 544.588 µs]|156.885 µs (43.0%)| |iast_HARDCODED_SECRET_DISABLED|483.752 µs [462.445 µs, 505.058 µs]|119.189 µs (32.7%)| |iast_INACTIVE|447.884 µs [426.958 µs, 468.811 µs]|83.321 µs (22.9%)| |iast_TELEMETRY_OFF|471.779 µs [449.298 µs, 494.261 µs]|107.216 µs (29.4%)| |tracing|446.048 µs [425.501 µs, 466.594 µs]|81.485 µs (22.4%)|

Dacapo

Parameters

Baseline Candidate
baseline_or_candidate baseline candidate
git_branch master alejandro.gonzalez/Send-secure-marks-to-backend
git_commit_date 1727340475 1727353553
git_commit_sha 8ee4a5d6dd 0ba963f931
release_version 1.40.0-SNAPSHOT~8ee4a5d6dd 1.40.0-SNAPSHOT~0ba963f931
See matching parameters | |Baseline |Candidate | |---------------------|----------------------------------------------|----------------------------------------------| |application |biojava |biojava | |ci_job_date |1727355508 |1727355508 | |ci_job_id |652531650 |652531650 | |ci_pipeline_id|45204393 |45204393 | |cpu_model |Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz|Intel(R) Xeon(R) Platinum 8259CL CPU @ 2.50GHz| |variant |appsec |appsec |

Summary

Found 0 performance improvements and 0 performance regressions! Performance is the same for 12 metrics, 0 unstable metrics.

Execution time for biojava ```mermaid gantt title biojava - execution time [CI 0.99] : candidate=1.40.0-SNAPSHOT~0ba963f931, baseline=1.40.0-SNAPSHOT~8ee4a5d6dd dateFormat X axisFormat %s section baseline no_agent (15.367 s) : 15367000, 15367000 . : milestone, 15367000, appsec (15.172 s) : 15172000, 15172000 . : milestone, 15172000, iast (18.9 s) : 18900000, 18900000 . : milestone, 18900000, iast_GLOBAL (17.77 s) : 17770000, 17770000 . : milestone, 17770000, profiling (16.052 s) : 16052000, 16052000 . : milestone, 16052000, tracing (15.328 s) : 15328000, 15328000 . : milestone, 15328000, section candidate no_agent (14.888 s) : 14888000, 14888000 . : milestone, 14888000, appsec (15.361 s) : 15361000, 15361000 . : milestone, 15361000, iast (18.672 s) : 18672000, 18672000 . : milestone, 18672000, iast_GLOBAL (18.146 s) : 18146000, 18146000 . : milestone, 18146000, profiling (15.322 s) : 15322000, 15322000 . : milestone, 15322000, tracing (15.39 s) : 15390000, 15390000 . : milestone, 15390000, ``` * **baseline** results |Variant|Execution Time [CI 0.99]|Δ no_agent| |---|---|---| |no_agent|15.367 s [15.367 s, 15.367 s]|-| |appsec|15.172 s [15.172 s, 15.172 s]|-195.0 ms (-1.3%)| |iast|18.9 s [18.9 s, 18.9 s]|3.533 s (23.0%)| |iast_GLOBAL|17.77 s [17.77 s, 17.77 s]|2.403 s (15.6%)| |profiling|16.052 s [16.052 s, 16.052 s]|685.0 ms (4.5%)| |tracing|15.328 s [15.328 s, 15.328 s]|-39.0 ms (-0.3%)| * **candidate** results |Variant|Execution Time [CI 0.99]|Δ no_agent| |---|---|---| |no_agent|14.888 s [14.888 s, 14.888 s]|-| |appsec|15.361 s [15.361 s, 15.361 s]|473.0 ms (3.2%)| |iast|18.672 s [18.672 s, 18.672 s]|3.784 s (25.4%)| |iast_GLOBAL|18.146 s [18.146 s, 18.146 s]|3.258 s (21.9%)| |profiling|15.322 s [15.322 s, 15.322 s]|434.0 ms (2.9%)| |tracing|15.39 s [15.39 s, 15.39 s]|502.0 ms (3.4%)|
Execution time for tomcat ```mermaid gantt title tomcat - execution time [CI 0.99] : candidate=1.40.0-SNAPSHOT~0ba963f931, baseline=1.40.0-SNAPSHOT~8ee4a5d6dd dateFormat X axisFormat %s section baseline no_agent (1.459 ms) : 1448, 1471 . : milestone, 1459, appsec (2.309 ms) : 2269, 2350 . : milestone, 2309, iast (2.047 ms) : 1997, 2096 . : milestone, 2047, iast_GLOBAL (2.098 ms) : 2046, 2149 . : milestone, 2098, profiling (1.923 ms) : 1883, 1963 . : milestone, 1923, tracing (1.901 ms) : 1862, 1939 . : milestone, 1901, section candidate no_agent (1.462 ms) : 1450, 1473 . : milestone, 1462, appsec (2.322 ms) : 2281, 2363 . : milestone, 2322, iast (2.058 ms) : 2007, 2110 . : milestone, 2058, iast_GLOBAL (2.086 ms) : 2035, 2137 . : milestone, 2086, profiling (1.927 ms) : 1886, 1968 . : milestone, 1927, tracing (1.888 ms) : 1850, 1926 . : milestone, 1888, ``` * **baseline** results |Variant|Execution Time [CI 0.99]|Δ no_agent| |---|---|---| |no_agent|1.459 ms [1.448 ms, 1.471 ms]|-| |appsec|2.309 ms [2.269 ms, 2.35 ms]|850.053 µs (58.2%)| |iast|2.047 ms [1.997 ms, 2.096 ms]|587.115 µs (40.2%)| |iast_GLOBAL|2.098 ms [2.046 ms, 2.149 ms]|638.14 µs (43.7%)| |profiling|1.923 ms [1.883 ms, 1.963 ms]|464.054 µs (31.8%)| |tracing|1.901 ms [1.862 ms, 1.939 ms]|441.264 µs (30.2%)| * **candidate** results |Variant|Execution Time [CI 0.99]|Δ no_agent| |---|---|---| |no_agent|1.462 ms [1.45 ms, 1.473 ms]|-| |appsec|2.322 ms [2.281 ms, 2.363 ms]|859.763 µs (58.8%)| |iast|2.058 ms [2.007 ms, 2.11 ms]|596.416 µs (40.8%)| |iast_GLOBAL|2.086 ms [2.035 ms, 2.137 ms]|624.137 µs (42.7%)| |profiling|1.927 ms [1.886 ms, 1.968 ms]|465.301 µs (31.8%)| |tracing|1.888 ms [1.85 ms, 1.926 ms]|426.301 µs (29.2%)|