Understanding data lifetime via whole system simulation

Proceedings of the 13th USENIX Security Symposium

Volumn , Issue , 2004, Pages

  Chow, Jim ^a   Pfaff, Ben ^a   Garfinkel, Tal ^a   Christopher, Kevin ^a   Rosenblum, Mendel ^a  

^a Stanford University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

AUTHENTICATION;

CREDIT CARDS; KERNEL MEMORY; MOZILLA; REAL-WORLD; SECURE SOFTWARE DEVELOPMENT; SENSITIVE DATAS; SYSTEM LEVELS; SYSTEM SIMULATIONS;

SOFTWARE DESIGN;

EID: 85084160792     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (31)

1. Apache Software Foundation. The Apache HTTP Server project. http://httpd.apache.org.
2. K. Ashcraft and D. Engler. Using programmer-written compiler extensions to catch security holes. In IEEE Symposium on Security and Privacy, May 2002.
3. V. Bala, E. Duesterwald, and S. Banerjia. Dynamo: a transparent dynamic optimization system. ACM SIGPLAN Notices, 35(5):1-12, 2000.
4. M. Blaze. A cryptographic file system for UNIX. In ACM Conference on Computer and Communications Security, pages 9-16, 1993.
5. Bochs: The cross platform IA-32 emulator. http://bochs.sourceforge.net/.
6. P. Broadwell, M. Harren, and N. Sastry. Scrash: A system for generating secure crash information. In Proceedings of the 11th USENIX Security Symposium, August 2003.
7. M. Burrows, S. N. Freund, and J. Wiener. Run-time type checking for binary programs. International Conference on Compiler Construction, April 2003.
8. B. Cmelik and D. Keppel. Shade: a fast instruction-set simulator for execution profiling. In Proceedings of the 1994 ACM SIGMETRICS conference on Measurement and modeling of computer systems, pages 128-137. ACM Press, 1994.
9. G. W. Dunlap, S. T. King, S. Cinar, M. A. Basrai, and P. M. Chen. ReVirt: enabling intrusion analysis through virtual-machine logging and replay. SIGOPS Operating Systems Review, 36(SI):211-224, 2002.
10. Gentoo Linux. http://www.gentoo.org.
11. P. Gutmann. Secure deletion of data from magnetic and solidstate memory. In Proceedings of the 6th USENIX Security Symposium, july 1996.
12. P. Gutmann. Data remanence in semiconductor devices. In Proceedings of the 7th USENIX Security Symposium, Jan. 1998.
13. P. Gutmann. Software generation of practically strong random numbers. In Proceedings of the 8th USENIX Security Symposium, August 1999.
14. M. Howard. Some bad news and some good news. http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dncode%/html/secure10102002.asp, October 2002.
15. IBM Rational software. IBM Rational Purify. http://www.rational.com.
16. V. Kiriansky, D. Bruening, and S. Amarasinghe. Secure execution via program shepherding. In Proceedings of the 11th USENIX Security Symposium, August 2002.
17. D. Lea. A memory allocator. http://gee.cs.oswego.edu/dl/html/malloc.html.
18. P. S. Magnusson, M. Christensson, J. Eskilson, D. Forsgren, G. Hallberg, J. Hogberg, F. Larsson, A. Moestedt, and B. Werner. Simics: A full system simulation platform. IEEE Computer, 35(2):50-58, February 2002.
19. N. Nethercote and J. Seward. Valgrind: A program supervision framework. In O. Sokolsky and M. Viswanathan, editors, Electronic Notes in Theoretical Computer Science, Volume 89. Elsevier, 2003.
20. Perl security manual page. http://www.perldoc.com/perl5.6/pod/perlsec.html.
21. N. Provos. Encrypting virtual memory. In Proceedings of the 10th USENIX Security Symposium, pages 35-44, August 2000.
22. M. Rosenblum, S. A. Herrod, E. Witchel, and A. Gupta. Complete computer system simulation: The SimOS approach. IEEE Parallel and Distributed Technology: Systems and Applications, 3(4):34-43, Winter 1995.
23. J. S. Type Qualifiers: Lightweight Specifications to Improve Software Quality. PhD thesis, University of California, Berkeley, December 2002.
24. U. Shankar, K. Talwar, J. S. Foster, and D. Wagner. Detecting format string vulnerabilities with type qualifiers. In Proc. 10th USENIX Security Symposium, August 2001.
25. D. A. Solomon and M. Russinovich. Inside Microsoft Windows 2000. Microsoft Press, 2000.
26. R. Stallman et al. GNU Emacs. ftp://ftp.gnu.org/pub/gnu/emacs.
27. The Mozilla Organization. Home of the mozilla, firebird, and camino web browsers. http://www.mozilla.org/.
28. J. Viega. Protecting sensitive data in memory. http://www-106.ibm.com/developerworks/security/library/s-data.html?dwzo%ne=security.
29. J. Viega and G. McGraw. Building Secure Software. Addison-Wesley, 2002.
30. VMware, Inc. VMware virtual machine technology. http://www.vmware.com/.
31. E. Witchel and M. Rosenblum. Embra: Fast and flexible machine simulation. In Measurement and Modeling of Computer Systems, pages 68-79, 1996.