Making information flow explicit in histar

Communications of the ACM

Volumn 54, Issue 11, 2011, Pages 93-101

  Zeldovich, Nickolai ^a   Boyd Wickizer, Silas ^a   Kohler, Eddie ^b   Mazières, David ^c  

^a MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

^b UNIVERSITY OF CALIFORNIA   (United States)

^c STANFORD UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

INFORMATION FLOW CONTROL; INFORMATION FLOWS; NOVEL APPLICATIONS; PRIVACY PRESERVING; SECURITY FEATURES; VIRUS SCANNERS; WEB SERVERS;

SYSTEMS ANALYSIS; USER INTERFACES; VIRUSES;

SECURITY SYSTEMS;

EID: 80155195722     PISSN: 00010782     EISSN: 15577317     Source Type: Journal    
DOI: 10.1145/2018396.2018419     Document Type: Article

References (21)

1. Bell, D. E., La Padula, L. Secure Computer System: Unified Exposition and Multics Interpretation. Technical Report MTR-2997, Rev. 1, MITRE Corporation, Bedford, MA, March 1976.
2. Biba, K. J. Integrity Considerations for Secure Computer Systems. Technical Report mtr-3153, MITRE Corporation, Bedford, MA, April 1977.
3. Bomberger, A. C., Frantz, A. P., Frantz, W. S., Hardy, A. C., Hardy, N., Landau, C. R., Shapiro, J. S. The KeyKOS nanokernel architecture. In Proceedings of the USENIX Workshop on Micro-Kernels and Other Kernel Architectures, April 1992, 95-112.
4. Efstathopoulos, P., Krohn, M., Van De Bogart, S., Frey, C., Ziegler, D., Kohler, E., Mazières, D., Kaashoek, F., Morris, R. Labels and event processes in the Asbestos operating system. In Proceedings of the 20th SOSP (Brighton, U. K., October 2005), 17-30. (Pubitemid 44892202)
5. Fraser, T. LOMAC: low water-mark integrity protection for COTS environments. In Proceedings of the IEEE Symposium on Security and Privacy (Oakland, CA, May 2000), 230-245.
6. Hamilton, G., Kougiouris, P. The Spring nucleus: a microkernel for objects. In Proceedings of the Summer 1993 USENIX (Cincinnati, OH, April 1993), 147-159.
7. Krohn, M., Efstathopoulos, P., Frey, C., Kaashoek, F., Kohler, E., Mazières, D., Morris, R., Osborne, M., Van De Bogart, S., Ziegler, D. Make least privilege a right (not a privilege). In Proceedings of the 10th Workshop on Hot Topics in Operating Systems (Santa Fe, NM, June 2005).
8. Krohn, M., Yip, A., Brodsky, M., Cliffer, N., Kaashoek, M. F., Kohler, E., Morris, R. Information flow control for standard OS abstractions. In Proceedings of the 21st SOSP (Stevenson, WA, October 2007), 321-334.
9. Landwehr, C. E. Formal models for computer security. Comput. Surv. 13, 3(September 1981), 247-278.
10. Leyden, J. Anti-virus vulnerabilities strike again. The Register, March 2005. http://www.theregister. co.uk/2005/03/18/mcafee-vuln/
11. Loscocco, P., Smalley, S. Integrating flexible support for security policies into the linux operating system. In Proceedings of the 2001 USENIX (Boston, MA, June 2001), 29-40, FREENIX track.
12. McIlroy, M. D., Reeds, J. A. Multilevel security in the UNIX tradition. Softw. Pract. Exp. 22, 8(1992), 673-694. (Pubitemid 23567587)
13. Myers, A. C., Liskov, B. Protecting privacy using the decentralized label model. Trans. Comput. Syst. 9, 4(October 2000), 410-442.
14. Naraine, R. Symantec antivirus worm hole puts millions at risk. eWeek.com, May 2006. http://www.eweek. com/article2/0, 1895, 1967941, 00.asp
15. Peterson, D. Anti-virus rife with vulnerabilities. digitalbond.com, January 2008. http://www.digitalbond.com/index.php/2008/01/07/anti-virus-rife- with-vulnerabilities/
16. Schroeder, M. D., Saltzer, J. H. A hardware architecture for implementing protection rings. In Proceedings of the 3rd SOSP (New York, March 1972), 42-54.
17. Shapiro, J. S., Smith, J. M., Farber, D. J. EROS: a fast capability system. In Proceedings of the 17th SOSP (Island Resort, SC, December 1999), 170-185. (Pubitemid 129548355)
18. Zeldovich, N., Boyd-Wickizer, S., Kohler, E., Mazières, D. Making information flow explicit in HiStar. In Proceedings of the 7th OSDI (Seattle, WA, November 2006), 263-278.
19. Zeldovich, N., Boyd-Wickizer, S., Mazières, D. Securing distributed systems with information flow control. In Proceedings of the 5th NSDI (San Francisco, CA, April 2008), 293-308.
20. Zeldovich, N., Kannan, H., Dalton, M., Kozyrakis, C. Hardware enforcement of application security policies. In Proceedings of the 8th OSDI (San Diego, CA, December 2008), 225-240.
21. Zoller, T. Clamav 0.94 and below-evasion and bypass due to malformed archive. April 2009. http://blog.zoller.lu/2009/04/clamav-094-and-below-evasion- and-bypass.html