Apiary: Easy-to-use desktop application fault containment on commodity operating systems

Proceedings of the 2010 USENIX Annual Technical Conference, USENIX ATC 2010

Volumn , Issue , 2019, Pages 103-116

  Potter, Shaya ^a   Nieh, Jason ^a  

^a Columbia University ^*  (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER OPERATING SYSTEMS; FILE ORGANIZATION; PERSONAL COMPUTERS;

APPLICATION EXECUTION; COMMODITY OPERATING SYSTEMS; DESKTOP APPLICATIONS; DESKTOP ENVIRONMENT; FAULT CONTAINMENT; OPERATING SYSTEM KERNEL; REAL APPLICATIONS; SPACE EFFICIENT;

CONTAINERS;

EID: 85077127256     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (41)

1. A. Acharya and M. Raje. MAPbox: Using Parameterized Behavior Classes to Confine Applications. In Proceedings of the 9th USENIX Security Symposium, Denver, CO, Aug. 2000.
2. Adobe Systems Incorporated. Buffer Overflow Issue in Versions 9.0 and Earlier of Adobe Reader and Acrobat. http://www.adobe.com/support/security/advisories/apsa09-01.html, Feb. 2009.
3. D. Balfanz and D. R. Simon. WindowBox: A Simple Security Model for the Connected Desktop. In Proceedings of the 4th USENIX Windows Systems Symposium, Seattle, WA, Aug. 2000.
4. R. A. Baratto, L. N. Kim, and J. Nieh. THINC: A Virtual Display Architecture for Thin-Client Computing. In Proceedings of the 20th ACM Symposium on Operating Systems Principles, Brighton, United Kingdom, Oct. 2005.
5. A. Berman, V. Bourassa, and E. Selberg. TRON: Process-specific File Protection for the UNIX Operating System. In Proceedings of the 1995 USENIX Winter Technical Conference, New Orleans, LA, Jan. 1995.
6. bitdefender. Trojan.pws.chromeinject.b. http://www.bitdefender.com/VIRUS-1000451-en-Trojan. PWS.ChromeInject.B.html, Nov. 2008.
7. J. Bonwick and B. Moore. ZFS: The Last Word In File Systems. http://opensolaris.org/os/community/zfs/docs/zfs_last.pdf, Nov. 2005.
8. K. Borders, E. V. Weele, B. Lau, and A. Prakash. Protecting Confidential Data on Personal Computers with Storage Capsules. In Proceedings of the 18th USENIX Security Symposium, Montreal. Canada, Aug. 2009.
9. Btrfs. https://btrfs.wiki.kernel.org.
10. C. Cowan, S. Beattie, G. Kroah-Hartman, C. Pu, P. Wagle, and V. Gligor. SubDomain: Parsimonious Server Security. In Proceedings of the 14th USENIX Systems Administration Conference, New Orleans, LA, Dec. 2000.
11. B. Cumberland, G. Carius, and A. Muir. Microsoft Windows NT Server 4.0, Terminal Server Edition: Technical Reference. Microsoft Press, Aug. 1999.
12. J. Fernandez-Sanguino. Debian GNU/Linux FAQ - Chapter 8 - The Debian Package Management Tools. http://www.debian.org/doc/FAQ/ch-pkgtools.en.html.
13. J. Gettys and R. W. Scheifler. Xlib - C Language X Interface. X Consortium, Inc., 1996.
14. M. Gilmore. 10Day CERT Advisory on PDF Files. http://seclists.org/fulldisclosure/2003/Jun/0463.html, June 2003.
15. Gnome.org. Libwnck Reference Manual. http://library.gnome.org/devel/libwnck/.
16. GOBBLES Security. Local/Remote Mpg123 Exploit. http://www.opennet.ru/base/exploits/1042565884_668.txt.html, Jan. 2003.
17. Google. Google Chrome - Features. http://www.google.com/chrome/intl/en/features.html.
18. Greasemonkey. http://www.greasespot.net/.
19. P. Grosjean. Speed Comparison of Various Number Crunching Packages (Version 2). http://www.sciviews.org/benchmark/, Mar. 2003.
20. S. Jain, F. Shafique, V. Djeric, and A. Goel. Application-level Isolation and Recovery with Solitude. In Proceedings of the 3rd ACM European Conference on Computer Systems, Glasgow, Scotland, Apr. 2008.
21. P.-H. Kamp and R. N. M. Watson. Jails: Confining the Omnipotent Root. In Proceedings of the 2nd International SANE Conference, MECC, Maastricht, The Netherlands, May 2000.
22. B. Lampson. Accountability and Freedom. http://research.microsoft.com/en-us/um/people/ blampson/slides/accountabilityandfreedom. ppt, Sept. 2005.
23. Z. Liang, V. Venkatakrishnan, and R. Sekar. Isolated Program Execution: An Application Transparent Approach for Executing Untrusted Programs. In Proceedings of the 19th Annual Computer Security Applications Conference, Las Vegas, NV, Dec. 2003.
24. Linux Containers. http://lxc.sourceforge.net/.
25. P. Loscocco and S. Smalley. Integrating Flexible Support for Security Policies into the Linux Operating System. In Proceedings of the 2001 USENIX Annual Technical Conference: FREENIX Track, Boston, MA, June 2001.
26. Microsoft Application Virtualization. http://www.microsoft.com/systemcenter/appv/.
27. Microsoft Corp. SendMessage Function. http://msdn.microsoft.com/en-us/library/ms644950.aspx.
28. S. Osman, D. Subhraveti, G. Su, and J. Nieh. The Design and Implementation of Zap: A System for Migrating Computing Environments. In Proceedings of the 5th Symposium on Operating Systems Design and Implementation, Boston, MA, Dec. 2002.
29. B. Pfaff, T. Garfinkel, and M. Rosenblum. Virtualization Aware File Systems: Getting Beyond the Limitations of Virtual Disks. In Proceedings of the 3rd Symposium of Networked Systems Design and Implementation, San Jose, CA, May 2006.
30. T. Porter and T. Duff. Compositing Digital Images. Computer Graphics, 18(3):253-259, July 1984.
31. S. Potter, J. Nieh, and M. Selsky. Secure Isolation of Untrusted Legacy Applications. In Proceedings of the 21st Conference on Large Installation System Administration, Dallas, TX, Nov. 2007.
32. D. Price and A. Tucker. Solaris Zones: Operating System Support for Consolidating Commercial Workloads. In Proceedings of the 18th Large Installation System Administration Conference, Atlanta, GA, Nov. 2004.
33. N. Provos. Improving Host Security with System Call Policies. In Proceedings of the 12th USENIX Security Symposium, Washington, DC, Aug. 2003.
34. C. Reis and S. D. Gribble. Isolating Web Programs in Modern Browser Architectures. In Proceedings of the 4th ACM European Conference on Computer Systems, Nuremberg, Germany, Mar. 2009.
35. RPM Package Manager. http://www.rpm.org/.
36. C. P. Sapuntzakis, R. Chandra, B. Pfaff, J. Chow, M. S. Lam, and M. Rosenblum. Optimizing the Migration of Virtual Computers. In Proceedings of the 5th Symposium on Operating Systems Design and Implementation, Boston, MA, Dec. 2002.
37. S. Uchino. MetaVNC - A Window Aware VNC. http://metavnc.sourceforge.net/.
38. Virtual Network Computing. http://www.realvnc.com/.
39. VMware Inc. VMware Worksation 6.5 Release Notes. http://www.vmware.com/support/ws65/doc/releasenotes_ws65.html, Oct. 2008.
40. D. Wagner. Janus: An Approach for Confinement of Untrusted Applications. Master's thesis, University of California, Berkeley, Aug. 1999.
41. C. P. Wright, J. Dave, P. Gupta, H. Krishnan, D. P. Quigley, E. Zadok, and M. N. Zubair. Versatility and Unix Semantics in Namespace Unification. ACM Transactions on Storage, 2(1):1-32, Feb. 2006.