Enforcing authorization policies using transactional memory introspection

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2008, Pages 223-234

  Birgisson, Arnar ^a   Dhawan, Mohan ^b   Erlingsson, Úlfar ^a   Ganapathy, Vinod ^b   Iftode, Liviu ^b  

^a REYKJAVIK UNIVERSITY   (Iceland)

^b RUTGERS UNIVERSITY   (United States)

Author keywords

Reference monitors; Transactional memory

Indexed keywords

AUTHORIZATION POLICY; CORNER CASE; MULTITHREADED SOFTWARES; RACE CONDITION; REFERENCE MONITORS; RUNTIME OVERHEADS; SECURITY CHECKS; SECURITY ENFORCEMENT; SOFTWARE FUNCTIONALITY; SOFTWARE TRANSACTIONAL MEMORY; TRANSACTIONAL MEMORY;

COMPUTER OPERATING SYSTEMS; DECENTRALIZED CONTROL; STORAGE ALLOCATION (COMPUTER);

SOFTWARE ARCHITECTURE;

EID: 70349275455     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1455770.1455800     Document Type: Conference Paper

References (62)

1. M. Abadi, A. Birrell, T. Harris, and M. Isard, Semantics of transactional memory and automatic mutual exclusion. In ACM POPL. Jan 2008.
2. M. Abadi and C. Fournet. Access control based on execution history. In NDSS, 2003.
3. A. Adi-Tabatabai, B. T. Lewis, V. Menon, B. R. Murphy, B. Saha, and T. Shpeisman. Compiler and runtime support for efficient software transactional memory. In ACM PLDF, June 2006.
4. The home of AspectC++. http://www.aspectc.org.
5. AspectJ project, http://www.eclipse.org/aspectj.
6. F. Besson, T. Blanc, C. Fournet, and A.D. Gordon. From stack inspection to access control: a security analysis for libraries. In IEEE CSFW, June 2004.
7. A. Birgisson and IJ. Erlingsson. An implementation and semantics for transactional memory introspection in Haskell. Technical Report RUTR-CS08007, Reykjavik University, Aug 2008.
8. M. Bishop and M. Digler. Checking for race conditions in file accesses. Computer Systems, 9(2): 131-152, Spring 1996.
9. G. Candea, S. Kawamoto, Y. Fujiki, G. Friedman, and A. Fox. Microreboot: A technique for cheap recovery. In USENIX OSDI, Dec 2004.
10. T. Cargill. Exception handling: A false sense of security. C++ Report, 6(9), Nov 1994.
11. P. M. Chen and B. Noble. When virtual is better than real. In USENIX HotOS, May 2001.
12. F.Christian. Exception handling. Technical Report RJ5724, IBM Research, 1987.
13. J. Chung, M. Dalton, H. Kannan, and C. Kozyrakis. Thread-safe dynamic binary transaction using transactional memory. In IEEE HPCA, Feb 2008.
14. D. D. Clark and D. R. Wilson. A comparison of commercial and military computer security policies. In IEEE S&P, May 1987.
15. F. Cristian. Exception handling and tolerance of software faults. In Software Fault Tolerance. Wiley, 1995.
16. G. W. Dunlap, S. T. King, S. Cinar. M. Basrai, and P. M. Chen. ReVirt: Enabling intrusion analysis through virtual-machine logging and replay. In USENIX OSDI, Dec 2002.
17. Ú. Erlingsson and F.B. Schneider. SASI enforcement of security policies: A retrospective. In New Security Paradigms Workshop, 1999.
18. C. Cao Minh et al.. An effective hybrid transactional memory system with strong isolation guarantees. In ISCA, June 2007.
19. K. E. Moore et al. LogTM: Log-based transactional memory. In IEEE HPCA, Feb 2006.
20. L. Hammond et al.. Transactional memory coherence and consistency. In ISCA, June 2004.
21. M. J. Moravan et al.. Supporting nested transactional memory in LogTM. In ACM ASPLOS, Oct 2006.
22. P. Damron et al. Hybrid transactional memory. In ACM ASPLOS, Oct 2006.
23. Extensible access control markup language. http://xml.coverpages.org/ xacml.html.
24. C. Fetzer, P. Felber, and K. Hogstedt. Automatic detection and masking of nonatomic exception handling. IEEE Trans, on Software Engineering, 30(8):547-560, 2004.
25. B. Fletcher. Case study: Open source and commercial applications in a Java-based SELinux cross-domain solution. In Annual SELinux Symp., Mar 2006.
26. FreeCS-the free chatserver. http://freecs.sourceforge.net.
27. V. Ganapathy, T. Jaeger, and S. Jha. Retrofitting legacy code for authorization policy enforcement. In IEEE S&P, May 2006.
28. V. Ganapathy, D. King, T. Jaeger, and S. Jha. Mining security-sensitive operations in legacy code using concept analysis. In ACM/IEEE ICSE, May 2007.
29. T. Garfinkel and M. Rosenblum. A virtual machine introspection based architecture for intrusion detection. In NDSS, Feb 2003.
30. L. Gong, G. Ellison, and M. Dageforde. Inside Java 2 Platform Security. Addison-Wesley, second edition, September 2003.
31. J. Gray and A. Reuter. Transaction Processing: Concepts and Techniques. Morgan Kaufmann, 1993.
32. T. Harris and K. Fraser. Language support for lightweight transactions. SIGPLANNoL, 38(1l):388-402, 2003.
33. T. Harris, S. Marlow, S. Peyton Jones, and M. Herlihy. Composable memory transactions. In PPoPP, Feb 2005.
34. M. Herlihy, V. Luchango, and M. Moir. A flexible framework for implementing software transactional memory. In ACM SIGPLAN OOPSLA, Oct 2006.
35. M. Herlihy, V. Luchango, M. Moir, and W. Scherer. Software transactional memory for dynamic-sized data structures. In ACM PODC, July 2003.
36. M. Hocking, K. Macmillan, and D. Shankar. Case study: Enhancing IBM Websphere with SELinux. In Annual SELinux Symp., Mar 2006.
37. T. Jaeger, A. Edwards, and X. Zhang. Consistency analysis of authorization hook placement in the Linux security modules framework. ACM TISSEC, 7(2): 175-205, May 2004.
38. Jakarta Apache Commons. http://commons.apache.org/transaction.
39. JCraft. WeirdX-pure Java window system server under GPL. http://www.jcraft.com/weirdx.
40. D. Kilpatrick, W. Salamon, and C. Vance. Securing the X Window system with SELinux. Technical Report 03-006, NAI Labs, Mar 2003.
41. S. T. King and P. M. Chen. Backtracking intrusions. In ACM SOSP, Oct 2003.
42. J. R. Larus and R. Rajwar. Transactional Memory. Synthesis Lectures on Computer Architecture. Morgan Claypool, 2006.
43. M. E. Locasto, A. Stavrou, G. Cretu, and A. Keromytis. From STEM to SEAD: Speculative execution for automated defense. In USENIX Annual Technical, June 2007.
44. M.D. Matthews. Distributed transactions with MYSQL XA, 2005.
45. Microsoft. Transactional NTFS in Windows Vista, http://msdn2.microsoft. com/en-us/library/aa363764.aspx.
46. E. Nightingale, D. Peek, P. M. Chen, and J. Flinn. Parallelizing security checks on commodity hardware. In ACM ASPLOS. March 2008.
47. S. Peyton-Jones and T. Harris. Transactional memory with data invariants. In ACM SIGPLAN TRANSACT, 2006.
48. C. J. Rossbach, O. S. Hofmann, D. E. Porter, H. E. Ramadan, A. Bhandari, and E. Witchel. TxLinux: Using and managing transactional memory in an operating system. In ACM SOSP, Oct 2007.
49. B. Saha, A.-R. Adl-Tabatabai, and Q. Jacobson. Architectural support for software transactional memory. In IEEE Symp. on Microarchitecture, Dec 2006.
50. F. B. Schneider. Enforceable security policies. ACM TISSEC, 3(l):3O-5O, Feb 2000.
51. M. I. Seltzer, Y. Endo, C. Small, and K. A. Smith. Dealing with disaster: Surviving misbehaved kernel extensions. In USENIX OSDI, Oct 1996.
52. N. Shavit and D. Touitou. Software transactional memory. In ACM PODC, Aug 1995.
53. T. Shpeisman, V. Menon, A. Adl-Tabatabai, S. Balensiefer, D. Grossman, R. L. Hudson, K. F. Moore, and B. Saha. Enforcing isolation and ordering in STM. In ACM PLDI, June 2007.
54. N. Swamy, M. Hicks, S. Tse, and S. Zdancewic. Managing policy updates in security-typed languages. In Computer Security Foundations Workshop, July 2006.
55. Tar for Java: The com.ice.tar package. http://trustice.com/java/tar/.
56. E. Walsh. Integrating X.Org with security-enhanced Linux. In Annual SELinux Symp., Mar 2007.
57. W. Weimer and G. C. Necula. Exceptional situations and program reliability. ACM TOPLAS, 30(2), Mar 2008.
58. C. Wright, C. Cowan, S. Smalley, J. Morris, and G. Kroah-Hartman. Linux security modules: General security support for the Linux kernel. In USENIX Security, Aug 2002.
59. x11 perf: The X11 server performance test program suite.
60. The XI1 Server, version XI 1R6.8 (X.Org Foundation).
61. A. Yumerefendi, B. Mickle, and L. Cox. TightLip: Keeping applications from spilling the beans. In USENIX NSDI, April 2007.
62. X. Zhang, A. Edwards, and T. Jaeger. Using CQUAL for static analysis of authorization hook placement. In USENIX Security, Aug 2002.