Automatic placement of authorization hooks in the linux security modules framework

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2005, Pages 330-339

  Ganapathy, Vinod ^a   Jaeger, Trent ^b   Jha, Somesh ^a  

^a UNIVERSITY OF WISCONSIN   (United States)

^b PENNSYLVANIA STATE UNIVERSITY   (United States)

Author keywords

Hook placement; LSM; SELinux; Static analysis

Indexed keywords

AUTHORIZATION; AUTHORIZATION HOOKS; KERNEL MODULE; LINUX SECURITY MODULES (LSM) FRAMEWORK;

AUTOMATIC PROGRAMMING; COMPUTER ARCHITECTURE; COMPUTER PROGRAMMING LANGUAGES; FUNCTION EVALUATION;

SECURITY SYSTEMS;

EID: 33745766475     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1102120.1102164     Document Type: Conference Paper

References (23)

1. J. P. Anderson. Computer security technology planning study, volume II. Technical Report ESD-TR-73-31, Deputy for Command and Management Systems, HQ Electronics Systems Division (AFSC), L. G. Hanscom Field, Bedford, MA, October 1972.
2. th USENIX UNIX Security, June 1993.
3. H. Chen. Lightweight Model Checking for Improving Software Security. PhD thesis, University of California, Berkeley, Fall 2004.
4. th ACM/USENIX OSDI, December 2000.
5. J. S. Foster, M. Fahndrich, and A. Aiken. A theory of type qualifiers. In ACM SIGPLAN PLDI, May 1999.
6. M. R. Garey and D. S. Johnson. Computers and Intractability. Freeman, New York, NY, 1979.
7. L. Gong and G. Ellison. Inside Java™ 2 Platform Security; Architecture, API Design, and Implementation. Pearson Education, 2003.
8. J. D. Guttman, A. L. Herzog, J. D. Ramsdell, and C. W. Skorupka, Verifying information flow goals in security-enhanced Linux. JCS, 13(1):115-134, 2005.
9. Example idioms, www.cs.wisc.edu/~vg/papers/ccs2005a/idioms.html.
10. T. Jaeger, A. Edwards, and X. Zhang. Consistency analysis of authorization hook placement in the Linux security modules framework. ACM TISSEC, 7(2):175-205, May 2004.
11. th USENIX Security, August 2003.
12. D. Kilpatrick, W. Salamon, and C. Vance, Securing the X Window system with SELinux. Technical Report 03-006, NAI Labs, March 2003.
13. L. Koved, M. Pistoia, and A. Kershenbaum, Access rights analysis for Java. In ACM SIGPLAN OOPSLA, November 2002.
14. X. Leroy, D. Doligez, J. Garrigue, D. Rémy, and J. Vouillon. The Objective Caml system (release 3.08), Technical report, INRIA Rocquencourt, July 2004.
15. P. Loscocco and S. Smalley. Integrating flexible support for security policies into the Linux operating system. In USENIX Annual Technical, June 2001.
16. J. McLean. The specification and modeling of computer security. IEEE Computer, 23(1):9-16, 1990.
17. S. S. Muchnick. Advanced Compiler Design and Implementation. Morgan Kaufmann, 1997.
18. th Intl. Conf. on Compiler Construction, April 2002.
19. M. Sharir and A. Pnueli. Two approaches to interprocedural dataflow analysis. In S. Muchnick and N. Jones, editors, Program Flow Analysis: Theory and Applications, pages 189-233, Prentice Hall, 1981.
20. Simplify. http://research.compaq.com/SRC/esc/Simplify.html.
21. Tresys Technology. Security-enhanced Linux policy management framework. http://sepolicy-server.sourceforge.net.
22. th USENIX Security, August 2002.
23. th USENIX Security, August 2002.