Synthesising monitors from high-level policies for the safe execution of untrusted software

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4991 LNCS, Issue , 2008, Pages 233-247

  Brown, Andrew ^a   Ryan, Mark ^a  

^a UNIVERSITY OF BIRMINGHAM   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; COMPUTER PROGRAMMING LANGUAGES; SECURITY SYSTEMS; USER INTERFACES;

MALWARE INFECTIONS; SAFE EXECUTION; UNTRUSTED SOFTWARE;

SECURITY OF DATA;

EID: 41549167799     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-79104-1_17     Document Type: Conference Paper

References (13)

1. Bauer, L., Ligatti, J., Walker, D.: More enforceable security policies. In: Cervesato, I. (ed.) Foundations of Computer Security: Proceedings of the FLoC 2002 workshop on Foundations of Computer Security, Copenhagen, Denmark, DIKU Technical Report, July 25-26, pp. 95-104 (2002)
2. Bauer, L., Ligatti, J., Walker, D.: A language and system for composing security policies. Technical Report TR-699-04, Princeton University (January 2004)
3. Bauer, L., Ligatti, J., Walker, D.: Composing security policies with Polymer. In: PLDl 2005: Proceedings of the 2005 ACM SIGPLAN conference on Programming language design and implementation, New York, NY, USA, pp. 305-314. ACM, New York (2005)
4. Dwyer, M.B., Avrunin, G.S., Corbett, J.C.: Patterns in property specifications for finite-state verification. In: ICSE 1999: Proceedings of the 21st international conference on Software engineering, Los Alamitos, CA, USA, pp. 411-420. IEEE Computer Society Press, Los Alamitos (1999)
5. Edjlali, G., Acharya, A., Chaudhary, V.: History-based access-control for mobile code. Technical report, University of California at Santa Barbara, Santa Barbara, CA. USA (1998)
6. Erlingsson, U., Schneider, F.B.: IRM enforcement of Java stack inspection. In: Proceedings of the 2000 IEEE Symposium on Security and Privacy (SP 2000), Washington, DC, USA, p. 246. IEEE Computer Society, Los Alamitos (2000)
7. Evans, D., Twyman, A.: Flexible policy-directed code safety. In: IEEE Symposium on Security and Privacy, pp. 32-45. IEEE Computer Society Press. Los Alamitos (1999)
8. Farmer, D., Venema, W.: Forensic Discovery. Professional Computing Series. Addison-Wesley, Reading (2004)
9. Ligatti, J., Bauer, L., Walker, D.: Edit automata: Enforcement mechanisms for run-time security policies. International Journal of Information Security 4(1-2). 2-16 (2005)
10. Myers, A.C., Liskov, B.: Protecting privacy using the decentralized label model. ACM Transactions on Software Engineering Methodology 9(4), 410-442 (2000)
11. th USENIX Security Symposium, Washington, DC. USENIX, pp. 128-146 (August 2003)
12. Schneider, F.B.: Enforceable security policies. ACM Trans. Inf. Syst. Secur. 3(1). 30-50 (2000)
13. Sekar, R., Uppuluri, P.: Synthesizing fast intrusion prevention/detection systems from high-level specifications. In: SSYM 1999: Proceedings of the 8th conference on USENIX Security Symposium. Berkeley. CA. USA. p. 6, USENIX Association (1999)