CLAMP: Practical prevention of large-scale data leaks

Proceedings - IEEE Symposium on Security and Privacy

Volumn , Issue , 2009, Pages 154-169

  Parno, Bryan ^a   McCune, Jonathan M ^a   Wendlandt, Dan ^a   Andersen, David G ^a   Perrig, Adrian ^a  

^a CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

APPLICATION CODES; APPLICATION DEVELOPERS; CODE RUNNING; ON-LINE ACCESS; OPERATING SYSTEMS; SCRIPTING LANGUAGES; SENSITIVE DATAS; SQL INJECTION; TEM; USER DATA; WEB SERVERS;

COMPUTER CRIME; COMPUTER OPERATING SYSTEMS; NETWORK SECURITY; SERVERS; WEB SERVICES;

ACCESS CONTROL;

EID: 70449632684     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SP.2009.21     Document Type: Conference Paper

References (33)

1. P. Barham, B. Dragovic, K. Fraser, S. Hand, T. Harris, A. Ho, R. Neugebar, I. Pratt, and A. Warfield. Xen and the art of virtualization. In SOSP, Oct. 2003.
2. S. Chong, K. Vikram, and A. C. Myers. SIF: Enforcing confidentiality and integrity in web applications. In Proceedings of the USENIX Security Symposium, Aug. 2007.
3. Courou. MyPhpMoney v2.0. http://sourceforge.net/projects/myphpmoney/, Apr. 2008.
4. P. Efstathopoulos, M. Krohn, S. VanDeBogart, C. Frey, D. Ziegler, E. Kohler, D. Mazières, F. Kaashoek, and R. Morris. Labels and event processes in the Asbestos operating system. In SOSP, Oct. 2005.
5. D. Gupta, S. Lee, M. Vrable, S. Savage, A. C. Snoeren, A. Vahdat, G. Varghese, and G. M. Voelker. Difference engine: Harnessing memory redundancy in virtual machines. In OSDI, Dec. 2008.
6. H. Härtig, M. Hohmuth, J. Liedtke, J. Wolter, and S. Schönberg. The performance of ì-kernel-based systems. In SOSP, 1997.
7. H. Havenstein. Google unveils plans for online personal health records. Computerworld, Oct. 2007.
8. P. A. Karger, M. E. Zurko, D. W. Bonin, A. H. Mason, and C. E. Kahn. A retrospective on the VAX VMM security kernel. IEEE Transactions on Software Engineering, 17(11):1147-1165, Nov. 1991.
9. R. Kerber. Court filing in TJX breach doubles toll. The Boston Globe, Oct. 2007.
10. E. Kohler. Hot crap! In Proceedings of WOWCS, Apr. 2008.
11. M. Krohn, A. Yip, M. Brodsky, N. Cliffer, M. F. Kaashoek, E. Kohler, and R. Morris. Information flow control for standard OS abstractions. In SOSP, Oct. 2007.
12. S. Kumar and K. Schwan. Netchannel: a VMM-level mechanism for continuous, transparent device access during VM migration. In Proceedings of VEE, Mar. 2008.
13. H. A. Lagar-Cavilla, J. A. Whitney, A. Scannell, P. Patchin, S. M. Rumble, E. de Lara, M. Brudno, and M. Satyanarayanan. SnowFlock: Rapid Virtual Machine Cloning for Cloud Computing. In Proceedings of Eurosys, Apr. 2009.
14. D. Magenheimer. Xen/IA64 code size stats. Xen developer's mailing list: http://lists.xensource.com/, Sept. 2005.
15. A. Menon, A. L. Cox, and W. Zwaenepoel. Optimizing network virtualization in Xen. In Proceedings of the USENIX Annual Technical Conference (ATC), June 2006.
16. Microsoft Corp. Microsoft announces HealthVault. http://www.microsoft. com/industry/government/solutions/healthvault.mspx%, Oct. 2007.
17. A. C. Myers and B. Liskov. Protecting privacy using the decentralized label model. ACM Transactions on Software Engineering and Methodology, 9(4):410-442, Oct. 2000.
18. A. Nanda. Keeping information private with VPD. In Oracle Magazine, Mar. 2004.
19. Open Source E-Commerce Solutions. osCommerce. http://www.oscommerce.com/, Apr. 2008.
20. openSUSE. AppArmor. http://en.opensuse.org/AppArmor.
21. PGP Corporation. 2006 annual study: Cost of a data breach. http://www.computerworld.com/pdfs/PGP-Annual-Study-PDF.pdf.
22. M. Rhor. Alum charged with hacking into Texas A&M. http://www.guardian.co.uk/worldlatest/story/0, -6902530,00.html, Sept. 2007.
23. J. H. Saltzer and M. D. Schroeder. Protection of information in computer systems. Proceedings of IEEE, 63(9), 1975.
24. J. R. Santos, G. J. Janakiraman, Y. Turner, and I. Pratt. Netchannel 2: Optimizing network performance. In Pro- ceedings of the XenSource/Citrix Xen Summit, Nov. 2007.
25. S. Smalley and P. Loscocco. Integrating flexible support for security policies into the Linux operating system. In Proc. of the USENIX Annual Technical Conference, 2001.
26. R. Spencer, S. Smalley, P. Loscocco, M. Hibler, D. Andersen, and J. Lepreau. The Flask security architecture: System support for diverse security policies. In Proceedings of the USENIX Security Symposium, 1999.
27. TD AMERITRADE releases results of client SPAM investigation. http://www.amtd.com/newsroom/releasedetail.cfm? ReleaseID=264044, Sept. 2007.
28. Verizon Business. 2008 data breach investigations report. http://www.verizonbusiness.com/resources/security/databreachreport.pdf.
29. VMware Corporation. VMware ESX, bare-metal hypervisor for virtual machines. http://www.vmware.com/products/vi/esx/, Nov. 2008.
30. M. Vrable, J. Ma, J. Chen, D. Moore, E. Vandekieft, A. C. Snoeren, G. M. Voelker, and S. Savage. Scalability, fidelity and containment in the Potemkin virtual honeyfarm. In SOSP, 2005.
31. H. Wang, X. Fan, and J. H. C. Jackson. Protection and communication abstractions for web browsers in MashupOS. In SOSP, Oct. 2007.
32. D. A. Wheeler. Linux kernel 2.6: It's worth more! Available at: http://www.dwheeler.com/essays/linux-kernel-cost.html, Oct. 2004.
33. N. Zeldovich, S. Boyd-Wickizer, E. Kohler, and D. Mazières. Making information flow explicit in HiStar. In OSDI, 2006.