Isolated program execution: An application transparent approach for executing untrusted programs

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn 2003-January, Issue , 2003, Pages 182-191

  Liang, Zhenkai ^a   Venkatakrishnan, V N ^a   Sekar, R ^a  

^a Stony Brook University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER OPERATING SYSTEMS; SECURITY OF DATA; SECURITY SYSTEMS; UTILITY PROGRAMS;

CHANGE OPERATIONS; MULTIMEDIA FILES; NEW APPROACHES; PROGRAM EXECUTION; PROTOTYPE IMPLEMENTATIONS; READ OPERATION; RUNTIME OVERHEADS; SOFTWARE UTILITIES;

APPLICATION PROGRAMS;

EID: 84944734361     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSAC.2003.1254323     Document Type: Conference Paper

References (24)

1. Alcatraz. http://www.seclab.cs.sunysb.edu/alcatraz.
2. Recovery-oriented computing. http://roc.cs.berkeley.edu.
3. Strace. http://www.liacs.nl/~wichert/strace.
4. A. Acharya and M. Raje. Mapbox: Using parameterized behavior classes to confine applications. In USENIX Security Symposium, 2000.
5. A. Alexandrov, P. Kmiec, and K. Schauser. Consh: A confined execution environment for internet computations, 1998.
6. A. Brown and D. Patterson. Undo for operators: Building an undoable e-mail store. In USENIX Annual Technical Conference, 2003.
7. T. Chiueh, H. Sankaran, and A. Neogi. Spout: A transparent distributed execution engine for java applets. In International Conference on Distributed Computing Systems, 2000.
8. A. Dan, A. Mohindra, R. Ramaswami, and D. Sitaram. Chakravyuha: A sandbox operating system for the controlled execution of alien code. Technical report, IBM T.J. Watson research center, 1997.
9. I. Goldberg, D. Wagner, R. Thomas, and E. A. Brewer. A secure environment for untrusted helper applications: confining the wily hacker. In USENIX Security Symposium, 1996.
10. K. Jain and R. Sekar. User-level infrastructure for system call int erposition: A platform for intrusion detection and confinement. In ISOC Network and Distributed System Security, 2000.
11. S. Jajodia, P. Liu, and C. D. McCollum. Application-level isolation to cope with malicious database users. In ACSAC, 1998.
12. K. Kato and Y. Oyama. Softwarepot: An encapsulated transferable file system for secure software circulation. In Proc. of Int. Symp. on Software Security, 2003.
13. D. G. Korn and E. Krell. A new dimension for the unix file system. Software: Practice & Experience, 20(S1), 1990.
14. P. Liu, S. Jajodia, and C. D. McCollum. Intrusion confinement by isolation in information systems. Journal of Computer Security, 8, 2000.
15. D. Malkhi and M. K. Reiter. Secure execution of java applets using a remote playground. Software Engineering, 26(12), 2000.
16. N. Provos. Improving host security with system call policies, 2002.
17. D. J. Santry, M. J. Feeley, N. C. Hutchinson, and A. C. Veitch. Elephant: The file system that never forgets. In Workshop on Hot Topics in Operating Systems, 1999.
18. F. B. Schneider. Enforceable security policies. ACM Transactions on Information and System Security, 3(1):30-50, 2000.
19. R. Sekar, Y. Cai, and M. Segal. A specification-based approach for building survivable systems. In National Information Systems Security Conference, Oct 1998.
20. R. Sekar and P. Uppuluri. Synthesizing fast intrusion prevention/detection systems from high-level specifications. In Proceedings of the USENIX Security Symposium, 1999.
21. K. Sitaker. http://www.canonical.org/picturepages.
22. P. Uppuluri. Intrusion Detection/Prevention Using Behavior Specifications. PhD thesis, Stony Brook University, 2003.
23. J. A. Whittaker and A. D. Vivanco. Neutralizing windowsbased malicious mobile code. In Symposium on Applied Computing, 2002.
24. N. Zhu and T. Chiueh. Design, implementation, and evaluation of repairable file service,. In The International Conference on Dependable Systems and Networks, 2003.