Native client: A sandbox for portable, untrusted x86 native code

Proceedings - IEEE Symposium on Security and Privacy

Volumn , Issue , 2009, Pages 79-93

  Yee, Bennet ^a   Sehr, David ^a   Dardyk, Gregory ^a   Chen, J Bradley ^a   Muth, Robert ^a   Ormandy, Tavis ^a   Okasaka, Shiki ^a   Narula, Neha ^a   Fullagar, Nicholas ^a  

^a GOOGLE INC   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BROWSER-BASED APPLICATION; COMPUTATIONAL PERFORMANCE; INSTRUCTION SET EXTENSION; NATIVE CODE; OPEN ARCHITECTURE; OPERATING SYSTEMS; ORIENTED FEATURES; RUNTIMES; SIDE EFFECT; SOFTWARE FAULT; SYSTEM INTERACTIONS; WEB APPLICATION;

BINARY CODES; COMPUTER ARCHITECTURE; COMPUTER OPERATING SYSTEMS; NETWORK SECURITY; PROGRAM COMPILERS;

MULTIMEDIA SERVICES;

EID: 69149106605     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SP.2009.25     Document Type: Conference Paper

References (64)

1. M. Abadi, M. Budiu, U. Erlingsson, and J. Ligatti. Controlflow integrity: Principles, implementations, and applications. In Proceedings of the 12th ACM Conference on Computer and Communications Security, November 2005.
2. M. Accetta, R. Baron, W. Bolosky, D. Golub, R. Rashid, A. Tevanian, and M. Young. Mach: A new kernel foundation for UNIX development. pages 93-112, 1986.
3. A. Adl-Tabatabai, G. Langdale, S. Lucco, and R. Wahbe. Efficient and language-independent mobile programs. SIGPLAN Not., 31(5):127-136, 1996.
4. Advanced Micro Devices. AMD64 Architecture Programmer's Manual, Volume 1: Application Programming. Advanced Micro Devices, September 2007. Publication number: 24592.
5. Autoconf. http://www.gnu.org/software/autoconf/.
6. P. Barham, B. Dragovic, K. Fraser, S. Hand, A. Ho, R. Neugebauer, I. Pratt, and A. Warfield. Xen and the art of virtualization. In 19th ACM Symposium on Operating Systems Principles, pages 164-177, 2003.
7. E. Bugnion, S. Devine, K. Govil, and M. Rosenblum. Disco: Running commodity operating systems on scalable multiprocessors. ACM Transactions on Computer Systems, 15(4):412-447, November 1997. (Pubitemid 127449841)
8. Bullet physics SDK. http://www.bulletphysics.com.
9. J. Burns. Developing secure mobile applications for android. http://isecpartners.com/files/iSEC-Securing-Android-Apps.pdf, 2008.
10. K. Campbell, L. Gordon, M. Loeb, and L. Zhou. The economic cost of publicly announced information security breaches: empirical evidence from the stock market. Journal of Computer Security, 11(3):431-448, 2003.
11. B. Cantrill, M. Shapiro, and A. Leventhal. Dynamic instrumentation of production systems. In 2004 USENIX Annual Technical Conference, June 2004.
12. D. R. Cheriton. The V distributed system. Communications of the ACM, 31:314-333, 1988.
13. F. B. Cohen. Defense-in-depth against computer viruses. Computers and Security, 11(6):565-584, 1993.
14. J. Crawford and P. Gelsinger. Programming 80386. Sybex Inc., 1991.
15. A. Denning. ActiveX Controls Inside Out. Microsoft Press, May 1997.
16. Directorate for Command, Control, Communications and Computer Systems, U.S. Department of Defense Joint Staff. Information assurance through defense-in-depth. Technical report, Directorate for Command, Control, Communications and Computer Systems, U.S. Department of Defense Joint Staff, February 2000.
17. J. R. Douceur, J. Elson, J. Howell, and J. R. Lorch. Leveraging legacy code to deploy desktop applications on the web. In Proceedings of the 2008 Symposium on Operating System Design and Implementation, December 2008.
18. M. Eisler (editor). XDR: External data representation. Internet RFC 4506, 2006.
19. U. Erlingsson, M. Abadi, M. Vrable, M. Budiu, and G. Necula. XFI: Software guards for system address spaces. In OSDI '06: 7th Symposium on Operating Systems Design And Implementation, pages 75-88, November 2006.
20. B. Ford. VXA: A virtual architecture for durable compressed archives. In USENIX File and Storage Technologies, December 2005.
21. B. Ford and R. Cox. Vx32: Lightweight user-level sandboxing on the x86. In 2008 USENIX Annual Technical Conference, June 2008.
22. The GNU compiler collection. http://gcc.gnu.org.
23. GNU binutils. http://www.gnu.org/software/binutils/.
24. I. Goldberg, D. Wagner, R. Thomas, and E. A. Brewer. A secure enviroment for untrusted helper applications. In Proceedings of the 6th USENIX Security Symposium, 1996.
25. D. Golub, A. Dean, R. Forin, and R. Rashid. UNIX as an application program. In Proceedings of the Summer 1990 USENIX Conference, pages 87-95, 1990.
26. Google Inc. Protocol buffers. http://code.google.com/p/protobuf/.
27. Google Inc. Android-an open handset alliance project. http: //code.google.com/android, 2007.
28. J. Gosling, B. Joy, G. Steele, and G. Bracha. The Java Language Specification. Addison-Wesley, 2000.
29. B. Gough and R. Stallman. An Introduction to GCC. Network Theory, Ltd., 2004.
30. G. Hunt, J. Larus, M. Abadi, M. Aiken, P. Barham, M. Fahndrich, C. Hawblitzel, O. Hodson, S. Levi, N. Murphy, B. Steensgaard, D. Tarditi, T. Wobber, and B. Zill. An overview of the Singularity project. Technical Report MSRTR- 2005-2135, Microsoft Research, October 2005.
31. Intel Corporation. Intel Pentium processor invalid instruction errata overview. http://support.intel.com/support/processor/pentium/ppiie/index.html.
32. Intel Corporation. Intel 64 and IA-32 Architectures Software Developers Manual, Volume 1: Basic Architecture. Intel Corporation, August 2007. Order Number: 253655-024US.
33. S. Ioannidis and S. M. Bellovin. Building a secure web browser. In USENIX Annual Technical Conference, FREENIX Track, pages 127-134, 2001.
34. S. Ioannidis, S. M. Bellovin, and J. M. Smith. Sub-operating systems: A new approach to application security. In Proceedings of the 10th ACM SIGOPS European Workshop, 2002.
35. Jam 2.1 user's guide. http://javagen.com/jam/.
36. C. Jensen and D. Hagimont. Protection wrappers: a simple and portable sandbox for untrusted applications. In Proceedings of the 8th ACM SIGOPS European Systems Conference, pages 104-110, 1998.
37. W. Joy, E. Cooper, R. Fabry, S. Leffler, K. McKusick, and D. Mosher. 4.2 BSD system manual. Technical report, Computer Systems Research Group, University of California, Berkeley, 1983.
38. K. Kaspersky and A. Chang. Remote code execution through Intel CPU bugs. In Hack In The Box (HITB) 2008 Malaysia Conference.
39. T. Lindholm and F. Yellin. The Java Virtual Machine Specification. Prentice Hall, 1999.
40. S. McCamant and G. Morrisett. Efficient, verifiable binary sandboxing for a CISC architecture. Technical Report MITCSAIL- TR-2005-2030, 2005.
41. S. McCamant and G. Morrisett. Evaluating SFI for a CISC architecture. In 15th USENIX Security Symposium, August 2006.
42. Microsoft Corporation. The kill-bit faq - part 1 of 3. Microsoft Security Vulnerability Research and Defense (Blog).
43. Microsoft Corporation. Signing and checking code with Authenticode. http://msdn.microsoft.com/en-us/library/ms537364(VS.85).aspx.
44. Microsoft Corporation. Structured exception handling. http://msdn.microsoft.com/en-us/library/ms680657(VS.85).aspx, 2008.
45. G. Morrisett, K. Crary, N. Glew, and D. Walker. Stackbased typed assembly language. Journal of Functional Programming, 12(1):43-88, 2002.
46. G. Necula. Proof carrying code. In Principles of Programming Languages, 1997.
47. G. Nelson (editor). System Programming in Modula-3. Prentice-Hall, 1991.
48. Netscape Corporation. Gecko plugin API reference. http://developer. mozilla.org/en/docs/Gecko-Plugin-API-Reference.
49. V. Prasad, W. Cohen, F. Eigler, M. Hunt, J. Keniston, and J. Chen. Locating system problems using dynamic instrumentation. In 2005 Ottawa Linux Symposium, pages 49-64, July 2005.
50. N. Provos. Improving host security with system call policies. In USENIX Security Symposium, August 2003.
51. J. Reinders. Intel Thread Building Blocks. O'Reilly & Associates, 2007.
52. J. G. RichardWest. User-level sandboxing: a safe and efficient mechanism for extensibility. Technical Report TR-2003-2014, Boston University, Computer Science Department, Boston, MA, 2003.
53. J. Richter. CLR via C#, Second Edition. Microsoft Press, 2006.
54. M. Savage. Cost of computer viruses top $10 billion already this year. ChannelWeb, August 2001.
55. J. Shapiro, J. Smith, and D. Farber. EROS: a fast capability system. In Symposium on Operating System Principles, pages 170-185, 1999.
56. C. Small. MiSFIT: A tool for constructing safe extensible C++ systems. In Proceedings of the Third USENIX Conference on Object-Oriented Technologies, June 1997.
57. B. Stroustrup. The C++ Programming Language: Second Edition. Addison-Wesley, 1997.
58. M. Swift, M. Annamalai, B. Bershad, and H. Levy. Recovering device drivers. In 6th USENIX Symposium on Operating Systems Design and Implementation, December 2004.
59. D. Tarditi, G. Morrisett, P. Cheng, C. Stone, R. Harper, and P. Lee. TIL: a type-directed optimizing compiler for ML. In PLDI '96: Proceedings of the ACM SIGPLAN 1996 conference on Programming language design and implementation, pages 181-192, New York, NY, USA, 1996. ACM.
60. W. Tarreau. ptrace documentation. http://www.linuxhq.com/kernel/v2.4/36- rc1/Documentation/ptrace.txt, 2007.
61. U. S. Department of Defense, Computer Security Center. Trusted computer system evaluation criteria, December 1985.
62. R. Wahbe, S. Lucco, T. E. Anderson, and S. L. Graham. Efficient software-based fault isolation. ACM SIGOPS Operating Systems Review, 27(5):203-216, December 1993.
63. C. Waldspurger. Memory resource management in VMware ESX Server. In 5th Symposium on Operating Systems Design and Implementation, December 2002.
64. Document Object Model (DOM) Level 1 Specification. Number REC-DOM-Level-1-19981001. World Wide Web Consortium, October 1998.