Design and performance evaluation of a Proxy-based Java Rewriting security System

Proceedings - International Conference on Distributed Computing Systems

Volumn 2006, Issue , 2006, Pages

  Song, Yougang ^a   Xu, Ying ^a   Fleisch, Brett D ^a  

^a University of California Riverside   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BINARY REWRITING TECHNIQUES; JAVA REWRITING SYSTEM; REAL WEB TRACE; SECURITY POLICIES;

BINARY CODES; JAVA PROGRAMMING LANGUAGE; SERVERS; SOCIETIES AND INSTITUTIONS; WORLD WIDE WEB;

SECURITY OF DATA;

EID: 33947660918     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICDCS.2006.27     Document Type: Conference Paper

References (21)

1. Emin Gün Sirer, etc, Design and Implementation of a Distributed Virtual Machine for Networked Computers. In Proceedings of the Seventeenth Symposium on Operating Systems Principles, pages 202-216, Kiawah Island, South Carolina, December 1999.
2. M. Prasad and T. Chiueh, A Binary Rewriting Defense Against Stack-based Buffer Overflow Attacks, Proceedings of Usenix Annual Technical Conference, San Antonio, TX, June 2003
3. Greg Andrews, Link-Time Optimization of Parallel Scientific Programs, University of Arizona Seminar Abstract, Nov, 2002.
4. R. Hastings and B. Joyce, Purify: A tool for detecting memory leaks and access errors in C and C++ programs, Proceedings of the Winter 1992USENIX Conference, Berkeley, CA, January 1992, pp 125-138.
5. F. B. Schneider, etc, A Language-Based Approach to Security, Informatics, 2001, pp. 86-101.
6. U. Erlingsson, F. B. Schneider, IRM Enforcement of Java Stack Inspection, IEEE Symposium on Security and Privacy, Oakland, California, May 2000.
7. Li Gong, Inside Java 2 platform Security architecture, API design, and Implementation, Addison-Wesley Longman Publishing Co., Inc., 1999.
8. D. Evans and A. Twyman, Flexible Policy-Directed Code Safety, 1999 IEEE Symposium on Security and Privacy, Oakland, California, May 9-12, 1999.
9. Ú. Erlingsson and F. B. Schneider, SASI enforcement of security policies: A retrospective, Proceedings of the New Security Paradigms Workshop, Ontario, Canada, September 1999, pp87-95.
10. Y. Song and B. D. Fleisch, Rico: A Security Proxy for Mobile Code, Journal of Computers and Security Elsevier Advanced Technology, Elsevier Press, Volume 23, Issue 4, 2004, pp. 338-351
11. Y. Song and B. D. Fleisch, Sandboxing Mobile Code from Outside the OS, in the 19th ACM Symposium on Operating Systems Principles, Work in Progress Session, New York, 2003.
12. Apache Document, http://www.apache.org/
13. IRCache Project: http://www.ircache.net/
14. The Measurement Factory Document about server workload file size. http://www. measurement-factory.com/docs/FAQ/pmix4-reply-size-distr/
15. J. Almeida and P. Cao. Measuring Proxy Performance with the Wisconsin Proxy Benchmark, Technical Report 1373, Computer Sciences Dept, Univ. of Wisconsin-Madison, April 1998.
16. Web Polygraph: http://www.web-Polygraph.org
17. The Fourth TMF Cache-Off: http://cacheoff.measurement-factory.com/
18. CERT security report #237777, http://www.kb.cert.org/vuls/id/237777.
19. CERT security report #544392, http://www.kb.cert.org/vuls/id/544392.
20. AppletTrap: www.trendmicro.com.au/product/isap/
21. Finjan Software Documentation: http://www.finjan.com