A general dynamic information flow tracking framework for security applications

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn , Issue , 2006, Pages 463-472

  Lam, Lap Chung ^a   Chiueh, Tzi Cker ^a  

^a Rether Networks Inc   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER NETWORKS; DATA PROCESSING; SOFTWARE ENGINEERING;

APPLICATION-SPECIFIC PROCESSING; AUSSUM; INFORMATION FLOW TRACKING; SANDBOXING;

SECURITY OF DATA;

EID: 39049160206     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ACSAC.2006.6     Document Type: Conference Paper

References (20)

1. A. Conry-Murray. Product focus: Behavior-blocking stops unknown malicious code. http://www.networkmagazine.com/shared/article/showArticle.jhtml? articleld=8703363&classroom=, June 2002.
2. J. R. Crandall and F. T. Chong. Minos: Control data attack prevention orthogonal to memory model. In 37th Annual International Symposium on Microarchitecture, pages 221-232, December 2004.
3. P. Efstathopoulos, M. Krohn, S. VanDeBogart, C. Frey, D. Ziegler, E. Kohler, D. Mazires, F. Kaashoek, and R. Morris. Labels and event processes in the asbestosoperating system. In Proceedings of the 20th ACM Symposium on Operating Systems Principles, pages 17-30, October 2005.
4. J. S. Fenton. Memoryless subsystems. Computing Journal, 17(2):143-147, May 1974.
5. GrammaTech, Inc. Codesurfer. http://www.grammatech.com/products/ codesurfer/.
6. R. W. M. Jones and P. H. J. Kelly. Backwards-compatible bounds checking for arrays and pointers in c programs. In Proceedings of Automated and Algorithmic Debugging Workshop, pages 13-26, 1997.
7. L. C. Lam and T. Chiueh. Automatic extraction of highly accurate application-specific sandboxing policy. In Seventh International Symposium on Recent Advances in Intrusion Detection, Sophia Antipolis, French Riviera, France, September 15-17 2004.
8. L. C. Lam, Y. Yang, and T. cker Chiueh. Secure mobile code execution service. In Proceedings of USENIX Large Installation Systems Administration (LISA) Conference, December 2006.
9. Z. Liang, V. Venkatakrishnan, and R. Sekar. Isolated program execution: An application transparent approach for executing untrusted programs. 19th Annual Computer Security Applications Conference, December 8-12 2003.
10. A. C. Myers. JFlow: Practical mostly-static information flow control. In Symposium on Principles of Programming Languages, pages 228-241, 1999.
11. A. C. Myers and B. Liskov. A decentralized model for information flow control. In Symposium on Operating Systems Principles, pages 129-142, 1997.
12. N. Nethercote and J. Seward. Valgrind: A program super-vision framework. In Proceedings of the Third Workshop on Runtime Verification (RV'o3), July 2003.
13. J. Newsome and D. Song. Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on commodity software. In Proceedings of the 12th Annual Network and Distributed System Security Symposium (NDSS 2005), February 2005.
14. Perl. Perlsec. http://perldoc.perl.org/perlsec.html.
15. F. Pottier and V. Simonet. Information flow inference for ML. In Proceedings of the 29th ACM Symposium on Principles of Programming Languages (POPL'02), pages 319-330, Portland, Oregon, Jan. 2002.
16. V. Simonet. Flow Caml in a nutshell. In G. Hutton, editor, Proceedings of the first APPSEM-II workshop, pages 152-165, Nottingham, United Kingdom, March 2003.
17. G. E. Suh, J. W. Lee, D. Zhang, and S. Devadas. Secure program execution via dynamic information flow tracking. In Proceedings of the 11th International Conference on Architectural Support for Programming Languages and Operating Systems, pages 85-96, October 2004.
18. Tiny Software. Tiny firewall 6. http://www.tinysoftware.com/home/ tiny2?s=7807136686411155049Al&&pg=content05&an=tf6_home.
19. W. Xu, S. Bhatkar, and R. Sekar. Taint-enhanced policy enforcement: A practical approach to defeat a wide range of attacks. In 15th USENIX Security Symposium, pages 121-136, August 2006.
20. Y. Yu, F. Guo, S. Nanda, L. C. Lam, and T. Chiueh. A feather-weight virtual machine for windows applications. In Proceedings of the 2nd ACM/USENIX Conference on Virtual Execution Environments (VEE'06), June 2006.