Model-carrying code (MCC): A new paradigm for mobile-code security

Proceedings New Security Paradigms Workshop

Volumn , Issue , 2001, Pages 23-30

  Sekar, R ^a   Ramakrishnan, C R ^a   Ramakrishnan, I V ^a   Smolka, S A ^a  

^a STONY BROOK UNIVERSITY   (United States)

Author keywords

Mobile code security

Indexed keywords

C (PROGRAMMING LANGUAGE); CODES (STANDARDS); CRYPTOGRAPHY; INTERNET; JAVA PROGRAMMING LANGUAGE; RISKS;

MOBILE CODE CONSUMER; MOBILE CODE SECURITY; MODEL CARRYING CODE;

SECURITY OF DATA;

EID: 0242539799     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (21)

1. R Bowen, D Chee, M Segal, R Sekar, P Uppuluri, and T Shanbag. Building survivable systems: An integrated approach based on intrusion detection and confinement. In DARPA Information Security Symposium, 2000.
2. E. M. Clarke, E. A. Emerson, and A. P. Sistla. Automatic verification of finite-state concurrent systems using temporal logic specifications. ACM TOPLAS, 8(2), 1986.
3. B. Cui, Y. Dong, X. Du, K. Narayan Kumar, C. R. Ramakrishnan, I. V. Ramakrishnan, A. Roychoudhury, S. A. Smolka, and D. S. Warren. Logic programming and model checking. In Static Analysis Symposium. Springer Verlag, 1998.
4. S Forrest, S Hofmeyr, and A Somayaji. Intrusion detection using sequences of system calls. Journal of Computer Security, 1998.
5. L Gong. Inside Java 2 Platform Security: Architecture, API Design, and Implementation. Addison-Wesley Pub Co, 1998.
6. G. J. Holzmann. The model checker SPIN. IEEE Transactions on Software Engineering, 23(5):279-295, May 1997.
7. K Jain and R Sekar. User-level infrastructure for system call interposition: A platform for intrusion detection and confinement. In ISOC Network and Distributed System Security, 2000.
8. C Ko, G Fink, and K Levitt. Automated detection of vulnerabilities in privileged programs by execution monitoring. In Computer Security Application Conference, 1994.
9. R Kurshan. Computer Aided Verification of Coordinating Processes: The Automata-Theoretic Approach. Princeton University Press, 1994.
10. C. Lai, L. Gong, L. Koved, A. Nadalin, R. Schemers. User Authentication and Authorization in the Java Platform. Annual Computer Security Applications Conference, 1999.
11. R. Milner. Communication and Concurrency. International Series in Computer Science. Prentice Hall, 1989.
12. G Necula. Proof carrying code. In ACM Principles of Programming Languages, 1997.
13. G Necula and P Lee. The design and implementation of a certifying compiler. In Programming Languages Design and Implementation, 1998.
14. Y. S. Ramakrishna, C. R. Ramakrishnan, I. V. Ramakrishnan, S. A. Smolka, T. L. Swift, and D. S. Warren. Efficient model checking using tabled resolution. In Proceedings of the 9th International Conference on Computer-Aided Verification (CAV '97), Haifa, Israel, July 1997. Springer-Verlag.
15. F. Schneider, Enforceable Security Policies, ACM Transactions on Information Systems Security, 3(1), 2000.
16. C.R. Ramakrishnan, I.V. Ramakrishnan, S.A. Smolka, Y. Dong, X. Du, A. Roychoudhury, and V.N. Venkatakrishnan. XMC: A logic-programming-based verification toolset. In Computer Aided Verification (CAV), 2000.
17. A. Roychoudhury, C. R. Ramakrishnan, and I. V. Ramakrishnan. Justifying proofs using memo tables. In ACM Conference on Principles and Practice of Declarative Programming (PPDP), 2000.
18. R. Sekar, M. Bendre, P. Bollineni and D. Dhurjati, A Fast Automaton-Based Approach for Learning Program Behaviors, IEEE Symposium on Security and Privacy, 2001.
19. R. Sekar and P. Uppuluri. Synthesizing fast intrusion prevention/detection systems from high-level specifications. In USENIX Security Symposium, 1999.
20. D. Wagner and D. Dean, Intrusion detection via static analysis, IEEE Symposium on Security and Privacy, 2001.
21. XSB. The XSB tabled logic programming system. Available from http://xsb.sourceforge.net.