Native client: A sandbox for portable, untrusted x86 native code

Communications of the ACM

Volumn 53, Issue 1, 2010, Pages 91-99

  Yee, Bennet ^a   Sehr, David ^a   Dardyk, Gregory ^a   Chen, J Bradley ^a   Muth, Robert ^a   Ormandy, Tavis ^a   Okasaka, Shiki ^a   Narula, Neha ^a   Fullagar, Nicholas ^a  

^a GOOGLE INC   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BROWSER-BASED APPLICATION; COMPUTATIONAL PERFORMANCE; INSTRUCTION SET EXTENSION; NATIVE CODE; OPEN ARCHITECTURE; OPERATING SYSTEMS; ORIENTED FEATURES; RUNTIMES; SIDE EFFECT; SOFTWARE FAULT; SYSTEM INTERACTIONS; THIRD-PARTY TOOLS; WEB APPLICATION;

COMPUTER ARCHITECTURE; COMPUTER OPERATING SYSTEMS; PROGRAM COMPILERS;

BINARY CODES;

EID: 73649126934     PISSN: 00010782     EISSN: 15577317     Source Type: Journal    
DOI: 10.1145/1629175.1629203     Document Type: Article

References (27)

1. Accetta, M., Baron, R., Bolosky, W., Golub, D., Rashid, R., Tevanian, A., Young, M. Mach: A New Kernel Foundation for UNIX Development. 1986, 93-112.
2. Burns, J. Developing secure mobile applications for android. http:// isecpartners.com/fles/iseC- securing-android-apps.pdf, 2008.
3. Campbell, K., Gordon, L., Loeb, M., Zhou, L. The economic cost of publicly announced information security breaches: empirical evidence from the stock market. J. Comp. Secur. 11, 3 (2003), 431-448.
4. Cheriton, D.R. The V distributed system. Commun. ACM 31 (1988), 314-333.
5. Cohen, F.B. Defense-in-depth against computer viruses. Comp. Secur. 11, 6 (1993), 565-584.
6. Crawford, J. Gelsinger, P. Programming 80386. Sybex Inc. (1991)
7. Denning, A. ActiveX Controls Inside Out. Microsoft Press (May 1997)
8. Directorate for Command, Control, Communications and Computer systems, U.S. Department of defense Joint staff. Information assurance through defense-in-depth. Technical report, directorate for Command, Control, Communications and Computer systems, U.S. Department of defense Joint staff, Feb. 2000.
9. Douceur, J.R., Elson, J., Howell, J., Lorch, J.R. Leveraging legacy code to deploy desktop applications on the web. In Proceedings of the 2008 Symposium on Operating System Design and Implementation (December 2008).
10. Ford, B., Cox, R. Vx32: lightweight user-level sandboxing on the x86. In 2008 USENIX Annual Technical Conference (June 2008).
11. Goldberg, I., Wagner, D., Thomas, R., Brewer, E.A. A secure enviroment for untrusted helper applications. In Proceedings of the 6th USENIX Security Symposium (1996).
12. Golub, D., Dean, A., Forin, R., Rashid, R. UnIx as an application program. In Proceedings of the Summer 1990 USENIX Conference (1990), 87-95.
13. Joy, W., Cooper, E., Fabry, R., Leffer, S., McKusick, K., Mosher, D. 4.2 bsd system manual. Technical report, Computer Systems Research Group, University of California, Berkeley, 1983.
14. Kaspersky, K., Chang, A. Remote code execution through Intel CPU bugs. In Hack In The Box (HITB) 2008 Malaysia Conference.
15. McCamant, S., Morrisett, G. Effcient, verifable binary sandboxing for a CISC architecture. Technical report MIT-CSAIL-TR-2005-2030, 2005.
16. McCamant, S., Morrisett, G. Evaluating sFI for a CISC architecture. In 15th USENIX Security Symposium (Aug. 2006).
17. Microsoft Corporation. Signing and checking code with authenticode. Http://msdn.microsoft.com/en-us/library/ms537364(vs.85).aspx.
18. Microsoft Corporation. Structured exception handling. http://msdn.microsoft.com/en-us/library/ms680657(vs.85).aspx, 2008.
19. Netscape Corporation. Gecko plugin aPI reference. http://developer. mozilla.org/en/docs/Gecko-Plugin- aPI-reference.
20. Provos, N. Improving host security with system call policies. In USENIX Security Symposium (aug. 2003)
21. Reinders, J. Intel Thread Building Blocks. O'reilly & associates, 2007.
22. Savage, M. Cost of computer viruses top $10 billion already this year. ChannelWeb, Aug. 2001.
23. Small, C. MisFIt: a tool for constructing safe extensible C++ systems. In Proceedings of the Third USENIX Conference on Object-Oriented Technologies (June 1997).
24. Stroustrup, B. The C++ Programming Language: Second Edition. Addison-Wesley, 1997.
25. Tarreau, W. Ptrace documentation. http://www.linuxhq.com/kernel/v2.4/36- rc1/documentation/ptrace.txt, 2007
26. U. S. Department of defense, Computer security Center. Trusted computer system evaluation criteria, Dec. 1985.
27. Wahbe, R., Lucco, S., Anderson, T.E., Graham, S.L. Effcient software-based fault isolation. ACM SIGOPS Oper. Sys. Rev. 27, 5 (dec. 1993), 203-216.