Attack Surface Metrics and Automated Compile-Time OS Kernel Tailoring

20th Annual Network and Distributed System Security Symposium, NDSS 2013

Volumn , Issue , 2013, Pages

  Kurmus, Anil ^a   Tartler, Reinhard ^b   Dorneanu, Daniela ^a   Heinloth, Bernhard ^b   Rothberg, Valentin ^b   Ruprecht, Andreas ^b   Schröder Preikschat, Wolfgang ^b   Lohmann, Daniel ^b   Kapitza, Rüdiger ^c  

^a IBM RESEARCH ZURICH   (Switzerland)

^b UNIVERSITY OF ERLANGEN NUREMBERG   (Germany)

^c TECHNICAL UNIVERSITY OF BRAUNSCHWEIG   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

COMPILE TIME; CONFIGURATION OPTIONS; FILESYSTEM; LARGE CODE BASIS; LINUX KERNEL; PROGRAM DESIGN; SECURITY PRINCIPLES; SIMPLE APPROACH; SIMPLE++; USERS' SATISFACTIONS;

LINUX;

EID: 84906749325     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (55)

1. Mike Accetta, Robert Baron, David Golub, Richard Rashid, Avadis Tevanian, and Michael Young. “MACH: A New Kernel Foundation for UNIX Development”. In: Proceedings of the USENIX Summer Conference. 1986, pages 93-113.
2. Mikhail Belkin and Partha Niyogi. “Laplacian Eigenmaps and Spectral Techniques for Embedding and Clustering”. In: Advances in Neural Information Processing Systems 14. 2001, pages 585-591.
3. S.M. Bellovin. “On the Brittleness of Software and the Infeasibility of Security Metrics”. In: Security Privacy, IEEE 4.4 (2006), page 96. ISSN: 1540-7993. DOI: 10.1109/MSP.2006.101.
4. Thorsten Berger, Steven She, Krzysztof Czarnecki, and Andrzej Wasowski. Feature-to-Code Mapping in Two Large Product Lines. Technical report. University of Leipzig (Germany), University of Waterloo (Canada), IT University of Copenhagen (Denmark), 2010.
5. Thorsten Berger, Steven She, Rafael Lotufo, and Andrzej Wasowski und Krzysztof Czarnecki. “Variability Modeling in the Real: A Perspective from the Operating Systems Domain”. In: Proceedings of the 25th IEEE/ACM International Conference on Automated Software Engineering (ASE'10). (Antwerp, Belgium). 2010, pages 73-82. ISBN: 978-1-4503-0116-9. DOI: 10.1145/1858996. 1859010.
6. N. Biggs. Algebraic Graph Theory. 1974.
7. Miguel Castro, Manuel Costa, Jean-Philippe Martin, Marcus Peinado, Periklis Akritidis, Austin Donnelly, Paul Barham, and Richard Black. “Fast byte-granularity software fault isolation”. In: Proceedings of the ACM SIGOPS 22nd symposium on Operating systems principles. SOSP '09. 2009, pages 45-58. ISBN: 978-1-60558-752-3. DOI: 10.1145/1629575.1629581.
8. Dominique Chanet, Bjorn De Sutter, Bruno De Bus, Ludo Van Put, and Koen De Bosschere. “System-wide Compaction and Specialization of the Linux Kernel”. In: Proceedings of the 2005 ACM SIGPLAN/SIGBED Conference on Languages, Compilers and Tools for Embedded Systems (LCTES'05). 2005, pages 95-104. ISBN: 1-59593-018-3. DOI: 10.1145/1065910.1065925.
9. Andy Chou, Junfeng Yang, Benjamin Chelf, Seth Hallem, and Dawson Engler. “An empirical study of operating systems errors”. In: Proceedings of the 18th ACM Symposium on Operating Systems Principles (SOSP'01). (Banff, Alberta, Canada). 2001, pages 73-88. ISBN: 1-58113-389-8. DOI: 10.1145/502034.502042.
10. Russell Coker. Bonnie++. Benchmark suite for hard drive and file system performance. URL: http://www. coker.com.au/bonnie++/ (visited on 08/02/2012).
11. Kees Cook. Yama LSM. 2010. URL: http://lwn.net/Articles/393012/ (visited on 06/04/2012).
12. John Criswell, Andrew Lenharth, Dinakar Dhurjati, and Vikram Adve. “Secure Virtual Architecture: A Safe Execution Environment for Commodity Operating Systems”. In: Proceedings of the 21st ACM Symposium on Operating Systems Principles (SOSP'07). (Stevenson, WA, USA). 2007, pages 351-366. ISBN: 978-1-59593-591-5. DOI: 10.1145/1294261.1294295.
13. Christian Dietrich, Reinhard Tartler, Wolfgang Schröder-Preikschat, and Daniel Lohmann. “A Robust Approach for Variability Extraction from the Linux Build System”. In: Proceedings of the 16th Software Product Line Conference (SPLC'12). (Salvador, Brazil, Sept. 2-7, 2012). 2012, pages 21-30. ISBN: 978-1-4503-1094-9. DOI: 10.1145/2362536.2362544.
14. Stephanie Forrest, Steven Hofmeyr, and Anil Somayaji. “The Evolution of System-Call Monitoring”. In: Proceedings of the 2008 Annual Computer Security Applications Conference. ACSAC'08. 2008, pages 418-430. ISBN: 978-0-7695-3447-3. DOI: 10.1109/ACSAC.2008.54.
15. Frama-C: A framework for static analysis of C programs. URL: http://frama-c.cea.fr/ (visited on 08/01/2012).
16. Andreas Gohr. DokuWiki. URL: http://dokuwiki. org (visited on 06/03/2012).
17. Google Seccomp Sandbox for Linux. URL: http://code.google.com/p/seccompsandbox/wiki/overview (visited on 06/05/2012).
18. Toshiharu Harada, Takashi Horie, and Kazuo Tanaka. “Task Oriented Management Obviates Your Onus on Linux”. In: Proceedings of the Japan Linux Conference (2004). ISSN: 1348-7868.
19. H. Hartig, M. Hohmuth, N. Feske, C. Helmuth, A. Lackorzynski, F. Mehnert, and M. Peter. “The Nizza secure-system architecture”. In: Collaborative Computing: Networking, Applications and Worksharing, 2005 International Conference on. 2005, 10 pp. DOI: 10. 1109/COLCOM.2005.1651218.
20. M. Howard, J. Pincus, and J. Wing. “Measuring Relative Attack Surfaces”. In: Computer Security in the 21st Century (2005), pages 109-137.
21. A. Jaquith. Security Metrics: Replacing Fear, Uncertainty, and Doubt. 2007.
22. Gerwin Klein, Kevin Elphinstone, Gernot Heiser, June Andronick, David Cock, Philip Derrin, Dhammika Elkaduwe, Kai Engelhardt, Rafal Kolanski, Michael Norrish, Thomas Sewell, Harvey Tuch, and Simon Winwood. “seL4: formal verification of an OS kernel”. In: Proceedings of the 22nd ACM Symposium on Operating Systems Principles (SOSP'09). (Big Sky, Montana, USA). 2009, pages 207-220. ISBN: 978-1-60558-752-3. DOI: 10.1145/1629575. 1629596.
23. Calvin Ko, Timothy Fraser, Lee Badger, and Douglas Kilpatrick. “Detecting and countering system intrusions using software wrappers”. In: Proceedings of the 9th conference on USENIX Security Symposium - Volume 9. SSYM'00. 2000, pages 11-11.
24. Anil Kurmus, Alessandro Sorniotti, and Rüdiger Kapitza. “Attack surface reduction for commodity OS kernels: trimmed garden plants may attract less bugs”. In: Proceedings of the 4th European Workshop on system security (EUROSEC'11). (Salzburg, Austria). 2011, 6:1-6:6. ISBN: 978-1-4503-0613-3. DOI: 10.1145/1972551. 1972557.
25. C.T. Lee, J.M. Lin, Z.W. Hong, and W.T. Lee. “An Application-Oriented Linux Kernel Customization for Embedded Systems”. In: Journal of information science and engineering 20.6 (2004), pages 1093-1108. ISSN: 1016-2364.
26. Andrew Lenharth, Vikram S. Adve, and Samuel T. King. “Recovery domains: an organizing principle for recoverable operating systems”. In: Proceedings of the 14th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS'09). (Washington, DC, USA). 2009, pages 49-60. ISBN: 978-1-60558-406-5. DOI: 10.1145/1508244.1508251.
27. Jochen Liedtke. “On µ-Kernel Construction”. In: Proceedings of the 15th ACM Symposium on Operating Systems Principles (SOSP'95). ACM SIGOPS Operating Systems Review. 1995. DOI: 10.1145/224057.224075.
28. lxc: Linux Containers. URL: http://lxc. sourceforge.net (visited on 08/01/2012).
29. A. Madhavapeddy, R. Mortier, R. Sohan, T. Gazagnaire, S. Hand, T. Deegan, D. McAuley, and J. Crowcroft. “Turning Down the LAMP: Software Specialisation for the Cloud”. In: Proceedings of the 2nd USENIX Conference on hot topics in cloud computing (HOTCLOUD'10). 2010, pages 11-11.
30. P.K. Manadhata and J.M. Wing. “An Attack Surface Metric”. In: Software Engineering, IEEE Transactions on 37.3 (2011), pages 371-386. ISSN: 0098-5589. DOI: 10. 1109/TSE.2010.60.
31. Yandong Mao, Haogang Chen, Dong Zhou, Xi Wang, Nickolai Zeldovich, and M. Frans Kaashoek. “Software fault isolation with API integrity and multi-principal modules”. In: Proceedings of the 23rd ACM Symposium on Operating Systems Principles (SOSP'11). (Cascais, Portugal). 2011, pages 115-128. ISBN: 978-1-4503-0977-6. DOI: 10.1145/2043556.2043568.
32. Frank Mayer, Karl MacMillan, and David Caplan. SELinux By Example: Using Security Enhanced Linux. 2006, page 456. ISBN: 978-0131963696.
33. T.J. McCabe. “A Complexity Measure”. In: Software Engineering, IEEE Transactions on SE-2.4 (1976), pages 308-320. ISSN: 0098-5589. DOI: 10. 1109/TSE. 1976. 233837.
34. Jonathan M. McCune, Yanlin Li, Ning Qu, Zongwei Zhou, Anupam Datta, Virgil Gligor, and Adrian Perrig. “TrustVisor: Efficient TCB Reduction and Attestation”. In: Security and Privacy (SP), 2010 IEEE Symposium on. 2010, pages 143-158. DOI: 10.1109/SP.2010.17.
35. David Mosberger and Tai Jin. “httperf. A tool for measuring web server performance”. In: SIGMETRICS Performance Evaluation Review 26.3 (1998), pages 31-37. ISSN: 0163-5999. DOI: 10.1145/306225.306235.
36. Derek Gordon Murray, Grzegorz Milos, and Steven Hand. “Improving Xen security through disaggregation”. In: Proceedings of the fourth ACM SIGPLAN/SIGOPS international conference on Virtual execution environments. VEE '08. 2008, pages 151-160. ISBN: 978-1-59593-796-4. DOI: 10.1145/1346256.1346278.
37. Sarah Nadi and Richard C. Holt. “Mining Kbuild to Detect Variability Anomalies in Linux”. In: Proceedings of the 16th European Conference on Software Maintenance and Reengineering (CSMR'12). (Szeged, Hungary). 2012. ISBN: 978-1-4673-0984-4. DOI: 10. 1109/CSMR. 2012.21.
38. ncc: The new generation C compiler. URL: http://students.ceid.upatras.gr/sxanth/ncc/ (visited on 08/01/2012).
39. Nicolas Palix, Gaël Thomas, Suman Saha, Christophe Calvès, Julia L. Lawall, and Gilles Muller. “Faults in Linux: Ten years later”. In: Proceedings of the 16th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS'11). 2011, pages 305-318. DOI: 10.1145/1950365. 1950401.
40. phpBB. Free and Open Source Forum Software. URL: www.phpbb.com (visited on 06/03/2012).
41. Niels Provos. “Improving host security with system call policies”. In: Proceedings of the 12th Conference on USENIX Security Symposium (SSYM'03). Volume 12. 2003, pages 18-18.
42. D. Rosenberg. CVE-2010-3904 exploit. URL: www. vsecurity.com/download/tools/linux-rdsexploit.c (visited on 08/01/2012).
43. B. Schneier. “Attack trees”. In: Dr. Dobb's journal 12 (1999).
44. Steven She and Thorsten Berger. Formal Semantics of the Kconfig Language. Technical Note. University of Waterloo, 2010.
45. Yonghee Shin and Laurie Williams. “Is complexity really the enemy of software security?” In: Proceedings of the 4th ACM workshop on Quality of protection. QoP'08. 2008, pages 47-50. ISBN: 978-1-60558-321-1. DOI: 10.1145/1456362.1456372.
46. Julio Sincero, Reinhard Tartler, Daniel Lohmann, and Wolfgang Schröder-Preikschat. “Efficient Extraction and Analysis of Preprocessor-Based Variability”. In: Proceedings of the 9th International Conference on Generative Programming and Component Engineering (GPCE'10). (Eindhoven, The Netherlands). 2010, pages 33-42. ISBN: 978-1-4503-0154-1. DOI: 10.1145/1868294. 1868300.
47. Lenin Singaravelu, Calton Pu, Hermann Härtig, and Christian Helmuth. “Reducing TCB complexity for security-sensitive applications: three case studies”. In: Proceedings of the ACM SIGOPS/EuroSys European Conference on Computer Systems 2006 (EuroSys'06). (Leuven, Belgium). 2006, pages 161-174. ISBN: 1-59593-322-0. DOI: 10.1145/1217935.1217951.
48. Brad Spengler and PaX team. grsecurity kernel patches. URL: www.grsecurity.net (visited on 08/01/2012).
49. S. Stolfo, S.M. Bellovin, and D. Evans. “Measuring Security”. In: Security Privacy, IEEE 9.3 (2011), pages 60-65. ISSN: 1540-7993. DOI: 10.1109/MSP.2011.56.
50. Michael M. Swift, Steven Martin, Henry M. Levy, and Susan J. Eggers. “Nooks: an architecture for reliable device drivers”. In: Proceedings of the 9th ACM SIGOPS European Workshop “Beyond the PC: New Challenges for the Operating System”. (Saint-Emilion, France). 2002, pages 102-107. DOI: 10.1145/1133373.1133393.
51. Reinhard Tartler, Anil Kurmus, Andreas Ruprecht, Bernhard Heinloth, Valentin Rothberg, Daniela Dorneanu, Rüdiger Kapitza, Wolfgang Schröder-Preikschat, and Daniel Lohmann. “Automatic OS Kernel TCB Reduction by Leveraging Compile-Time Configurability”. In: Proceedings of the 8th Workshop on Hot Topics in System Dependability (HotDep'12). 2012.
52. Reinhard Tartler, Daniel Lohmann, Julio Sincero, and Wolfgang Schröder-Preikschat. “Feature Consistency in Compile-Time-Configurable System Software: Facing the Linux 10, 000 Feature Problem”. In: Proceedings of the ACM SIGOPS/EuroSys European Conference on Computer Systems 2011 (EuroSys'11). (Salzburg, Austria). 2011, pages 47-60. ISBN: 978-1-4503-0634-8. DOI: 10.1145/1966445.1966451.
53. Chris Wright, Crispin Cowan, James Morris, Stephen Smalley, and Greg Kroah-Hartman. “Linux Security Module Framework”. In: Proceedings of the Ottawa Linux Symposium. (Ottawa, OT, Canada). 2002, pages 604-617.
54. Michal Zalewski, Niels Heinen, and Sebastian Roschke. skipfish. Web application security scanner. URL: http://code.google.com/p/skipfish/ (visited on 06/03/2012).
55. Christoph Zengler and Wolfgang Küchlin. “Encoding the Linux Kernel Configuration in Propositional Logic”. In: Proceedings of the 19th European Conference on Artificial Intelligence (ECAI 2010) Workshop on Configuration 2010. 2010, pages 51-56.