Utilizing binary rewriting for improving end-host security

IEEE Transactions on Parallel and Distributed Systems

Volumn 18, Issue 12, 2007, Pages 1687-1699

  Song, Yougang ^a   Fleisch, Brett D ^a  

^a University of California Riverside ^*  (United States)

Author keywords

Binary rewriting; Performance evaluation; Security and protection; Traffic analysis; Web servers

Indexed keywords

BINARY CODES; COMPUTER SYSTEM FIREWALLS; JAVA PROGRAMMING LANGUAGE; TELECOMMUNICATION TRAFFIC; WEB SERVICES;

BINARY REWRITING; JAVA VIRTUAL MACHINE; PERFORMANCE EVALUATION; WEB CACHING PROXIES;

SECURITY OF DATA;

EID: 36348972313     PISSN: 10459219     EISSN: None     Source Type: Journal    
DOI: 10.1109/TPDS.2007.1083     Document Type: Article

References (35)

1. E.G. Sirer et al., "Design and Implementation of a Distributed Virtual Machine for Networked Computers," Proc. 17th Symp. Operating Systems Principles, pp. 202-216, Dec. 1999.
2. M. Prasad and T. Chiueh, "A Binary Rewriting Defense against Stack-Based Buffer Overflow Attacks," Proc. Usenix Ann. Technical Conf., June 2003.
3. G. Andrews, Link-Time Optimization of Parallel Scientific Programs seminar abstract, Univ. of Arizona, Nov. 2002.
4. R. Hastings and B. Joyce, "Purify: A Tool for Detecting Memory Leaks and Access Errors in C and C++ Programs," Proc. Winter Usenix Conf. pp. 125-138, Jan. 1992.
5. F.B. Schneider et al., "A Language-Based Approach to Security," Informatics, pp. 86-101, 2001.
6. U. Erlingsson and F.B. Schneider, "IRM Enforcement of Java Stack Inspection," Proc. IEEE Symp. Security and Privacy, May 2000.
7. L. Gong, Inside Java 2 Platform Security Architecture, API Design, and Implementation. Addison-Wesley Longman, 1999.
8. D. Evans and A. Twyman, "Flexible Policy-Directed Code Safety," Proc. IEEE Symp. Security and Privacy, May 1999.
9. U. Erlingsson and F.B. Schneider, "SASI Enforcement of Security Policies: A Retrospective," Proc. New Security Paradigms Workshop pp. 87-95, Sept. 1999.
10. Y. Song and B.D. Fleisch, "Rico: A Security Proxy for Mobile Code," Computers & Security, vol. 23, no. 4, pp. 338-351, 2004.
11. Y. Song and B.D. Fleisch, "Sandboxing Mobile Code from Outside the OS," Proc. 19th ACM Symp. Operating Systems Principles, 2003.
12. A. Baratloo, N. Singh, and T. Tsai, "Libsafe: Protecting Critical Elements of Stacks," White Paper 3-21-01, Avaya Labs, Avaya Inc., Feb. 2001.
13. R. Wahbe et al., "Efficient Software-Based Fault Isolation," Proc. Symp. Operation System Principlesi, 1993.
14. D.C. DuVarney, V.N. Venkatakrishnan, and S. Bhatkar, "SELF: A Transparent Security Extension for ELF Binaries," Proc. New Security Paradigms Workshop, Aug. 2003.
15. T. Chiuch and F. Hsu, "RAD: A Compile-Time Solution to Buffer Overflow Attacks," Proc. 21st Int'l Conf. Distributed Computing, p. 409, Apr. 2001.
16. C. Cowan et al., "Stackguard: Automatic Adaptive Detection and Prevention of Buffer-Overflow Attacks," Proc. Seventh Usenix Security Symp., pp. 63-78, Jan. 1998.
17. S. Debray, W. Evans, R. Muth, and B.D. Sutter, "Compiler Techniques for Code Compaction," ACM Trans. Programming Languages and Systems, vol. 22, no. 2, pp. 378-415, 2000.
18. C. Cifuentes and M. Emmerik, "UQBT: Adaptable Binary Translation at Low Cost," Computer, vol. 33, no. 3, p,p. 60-66, Mar. 2000.
19. T. Romer et al., "Instrumentation and Optimization of Wm32/Intel Executables Using Etch," Proc. First Usenix Windows NT Workshop, Aug. 1997.
20. Byte Code Eng. Library (BCEL), http://jakarta.Apache.org/bcel/ manual.html, 2006.
21. A. Srivastava and A. Eustace, "ATOM: A System for Building Customized Program Analysis Tools," Proc. ACM Conf. Programming Language Design and Implementation (SIGPLAN '94), May 1994.
22. L.R. James and E. Schnarr, "EEL: Machine Independent Executable Editing," Proc. ACM Conf. Programming Language Design and Implementation (SIGPLAN '95), June 1995.
23. B. Buck and J.K. HIlingsworth, "An API for Runtime Code Patching," Int'l J. High Performance Computing Applications, vol. 14, no. 4, pp. 317-329, 2000.
24. J. Almeida and P. Cao, "Measuring Proxy Performance with the Wisconsin Proxy Benchmark," Technical Report 1373, Computer Sciences Dept, Univ. of Wisconsin, Madison, Apr. 1998.
25. CERT Security Report #237777, http://www.kb.cert.org/vuls/id/237777, 2002.
26. CERT Security Report #447569, http://www.kb.cert.org/vuls/id/447569, 2005.
27. Sun Java Documentation, http://java.sun.com/, 2007.
28. The Measurement Factory Document about Server Workload File Size, http:// www.measurement-factory.com/docs/FAQ/pmix4-reply-size-distr/, 2006.
29. Web Polygraph, http://www.web-polygraph.org, 2006.
30. Apache Document, http://www.apache.org/, 2006.
31. The Fourth TMF Cache-Off, http: Cacheoff.measurement-factory.com/, 2001.
32. IRCache Project, http://www.ircache.net/, 2006.
33. IntraScan AppletTrap, www.trendmicro.com, 2006.
34. Finjan Software Documentation, http://www.finjan.com, 2006.
35. Access Control Documentation, http://groups.northwestern.edu/exec/ htmldocs/NT_Security.html, 2006.