[mathetic]

The goal is the same but the approach is different. This is entirely compile time and it covers all executions of the program, whereas taint analysis done at runtime and consider only some executions.

Also taint analysis typically doesn't track implicit flows described in the post, but detects the explicit ones.

[a1369209993]

> This is entirely compile time and it covers all executions of the program, whereas taint analysis done at runtime and consider only some executions.

That is literally just the difference between static versus dynamic typing.