Noninterference for a practical DIFC-based operating system

Proceedings - IEEE Symposium on Security and Privacy

Volumn , Issue , 2009, Pages 61-76

  Tromer, Eran ^a   Krohn, Maxwell ^b  

^a MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

^b CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMMUNICATING SEQUENTIAL PROCESS; COVERT CHANNELS; DECENTRALIZED INFORMATION FLOW CONTROL; FLUME SYSTEM; LINUX- OPERATING SYSTEM; OPERATING SYSTEMS; WEB APPLICATION;

NETWORK SECURITY; OPEN CHANNEL FLOW;

COMPUTER OPERATING SYSTEMS;

EID: 70449657350     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SP.2009.23     Document Type: Conference Paper

References (41)

1. P. Efstathopoulos, M. Krohn, S. VanDeBogart, C. Frey, D. Ziegler, E. Kohler, D. Mazières, F. Kaashoek, and R. Morris, "Labels and event processes in the Asbestos operating system," in Proceedings of the 20th ACM Symposium on Operating Systems Principles (SOSP), Brighton, UK, October 2005.
2. N. B. Zeldovich, S. Boyd-Wickizer, E. Kohler, and D. Mazières, "Making information flow explicit in HiStar," in Proceedings of the 5th Symposium on Operating Systems Design and Implementation (OSDI), Seattle, WA, Nov. 2006.
3. M. Krohn, A. Yip, M. Brodsky, N. Cliffer, M. F. Kaashoek, E. Kohler, and R. Morris, "Information flow control for standard OS abstractions," in Proceedings of the 21st ACM Symposium on Operating Systems Principles (SOSP), Stevenson, WA, October 2007.
4. A. C. Myers and B. Liskov, "A decentralized model for information flow control," in Proceedings of the 16th ACM Symposium on Operating Systems Principles (SOSP), Saint-Malô, France, Oct. 1997, pp. 129-142.
5. J. Fielding, "UN website is defaced via SQL injection," Tech Republic, Aug. 2007, http://blogs.techrepublic.com.com/networking/?p=312.
6. R. Lemos, "Payroll site closes on security worries," Cnet News.com, Feb. 2005, http://news.com.com/2102-1029-3-5587859.html.
7. News10, "Hacker accesses thousands of personal data files at CSU Chico," Mar. 2005, http://www.news10.net/display-story.aspx?storyid=9784.
8. K. Poulsen, "Car shoppers' credit details exposed in bulk," SecurityFocus, Sept. 2003, http://www.securityfocus.com/news/7067.
9. -, "FTC investigates petco.com security hole," SecurityFocus, Dec. 2003, http://www.securityfocus.com/news/7581.
10. R. Trounson, "Major breach of UCLA's computer files," Los Angeles Times, Dec. 12 2006.
11. M. D. McIlroy and J. A. Reeds, "Multilevel security in the UNIX tradition," Software-Practice and Experience, vol.22, no.8, pp. 673-694, 1992.
12. D. E. Denning, "A lattice model of secure information flow," Communications of the ACM, vol.19, no.5, pp. 236-243, May 1976.
13. T. Fraser, "LOMAC: Low water-mark integrity protection for COTS environments," in Proceedings of the IEEE Symposium on Security and Privacy, Oakland, CA, May 2000, pp. 230-245.
14. D. E. Bell and L. J. LaPadula, "Secure computer system: Unified exposition and Multics interpretation," MITRE Corparation, Bedford, MA, Tech. Rep. MTR-2997, Rev. 1, March 1976.
15. K. J. Biba, "Integrity considerations for secure computer systems," MITRE Corp., Bedford, MA, Tech. Rep. MTR-3153, Rev. 1, 1976.
16. C. A. R. Hoare, Communicating Sequential Processes. Englewood Cliffs, New Jersey: Prentice/Hall International, 1985.
17. J. A. Goguen and J. Meseguer, "Security policies and security models," in Proceedings of the IEEE Symposium on Research in Security and Privacy, 1982.
18. P. A. Ryan and S. A. Schneider, "Process algebra and non-interference," Journal of Computer Security, no.9, pp. 75-103, 2001.
19. A. W. Roscoe, A Theory and Practice of Concurrency. London, UK: Prentice Hall, 1998.
20. S. Schneider, Concurrent and Real-Time Systems: The CSP Approach. Chichester, UK: John Wiley & Sons, LTD, 2000.
21. A. Roscoe and M. H. Goldsmith, "What is intransitive noninterference?" in Proceedings of the 12th IEEE Computer Security Foundations Workshop (CSFW). IEEE Computer Society Press, 1999.
22. A. Bossi, C. Piazza, and S. Rossi, "Modelling downgrading in information flow security," in Proceedings of the 17th IEEE Computer Security Foundations Workshop (CSFW), June 2004.
23. J. Jacob, "On the derivation of secure components," in Proceedings of the the IEEE Symposium on Security and Privacy, Oakland, CA, 1989.
24. G. Lowe, "On information flow and refinement-closure," in Proceedings of the Workshop on Issues in the Theory of Security (WITS07), 2007.
25. H. Mantel, "Preserving Information Flow Properties under Refinement," in Proceedings of the 2001 IEEE Symposium on Security and Privacy, May 2001.
26. D. R. Engler, M. F. Kaashoek, and J. O'Toole, "Exokernel: An operating system architecture for application-level resource management," in Proceedings of the 15th ACM Symposium on Operating Systems Principles (SOSP), Copper Mountain Resort, Colorado, Dec. 1995, pp. 251-266.
27. A. C. Arpaci-Dusseau, R. H. Arpaci-Dusseau, N. C. Burnett, T. E. Denehy, T. J. Engle, H. S. Gunawi, J. A. Nugent, and F. I. Popovici, "Transforming policies into mechanisms with infokernel," in Proceedings of the 19th ACM Symposium on Operating Systems Principles (SOSP), Bolton Landing, Lake George, New York, Oct. 2003, pp. 90-105.
28. M. Bellare, R. Canetti, and H. Krawczyk, "Keying hash functions for message authentication," in Proceedings of the 16th Annual International Cryptology Conference on Advances in Cryptology (CRYPTO), Aug. 1996, pp. 1-15.
29. FIPS 180-2, Secure Hash Standard, U.S. Department of Commerce/ N.I.S.T., National Technical Information Service, Springfield, VA, Aug. 2002.
30. D. E. Bell and L. J. LaPadula, "Secure computer systems: Mathematical foundations," MITRE Corparation, Bedford, MA, Tech. Rep. Technical Report 2547, Volume 1, Mar. 1973.
31. Trusted Computer System Evaluation Criteria (Orange Book), DoD 5200.28-STD ed., Department of Defense, December 1985.
32. P. Loscocco and S. Smalley, "Integrating flexible support for security policies into the Linux operating system," in Proceedings of the 2001 USENIX Annual Technical Conference, San Diego, CA, June 2001, FREENIX track.
33. J. Palsberg and P. Ørbæk, "Trust in the λ-Calculus," in Proceedings of the 2nd International Symposium on Static Analysis, Sept. 1995.
34. J. Newsome and D. Song, "Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on commodity software," in Network and Distributed System Security Symposium (NDSS), Feb. 2005.
35. S. McCamant and M. Ernst, "Quantitative Information Flow as Network Flow Capacity," in Proceedings of the ACM SIGPLAN Conference on Programming Language Design and Implementation, 2008.
36. D. Volpano, C. Irvine, and G. Smith, "A sound type system for secure flow analysis," vol.4, no.2-3, 1996, pp. 167-187.
37. L. Zheng and A. C. Myers, "Dynamic security labels and noninterference," in Proceedings of the 2nd International Workshop on Formal Aspects in Security and Trust (FAST), Aug. 2004.
38. S. Tse and S. Zdancewic, "Run-time principals in information-flow type systems," ACM Transactions on Programming Language Systems, vol.30, no.1, 2007.
39. G. Lowe, "Some new attacks upon security protocols," in Proceedings of the 9th IEEE Computer Security Foundations Workshop (CSFW), 1996.
40. P. Ryan and S. Schneider, The Modelling and Analysis of Security Protocols: The CSP Approach. Addison-Wesley Professional, 2001.
41. J. Ouaknine, "A framework for model-checking timed CSP," Oxford University, Tech. Rep., 1999.