Towards Security-aware Program Visualization for Analyzing In-lined Reference Monitors

In-lined Reference Monitoring frameworks are an emerging technology for enforcing security policies over untrusted, mobile, binary code. However, formulating correct policy specifications for such frameworks to enforce remains a daunting undertaking with few supporting tools. A visualization approach is proposed to aid in this task; preliminary results are presented in this short paper. In contrast to existing approaches, which typically involve tedious and error-prone manual inspection of complex binary code, the proposed framework provides automatically generated, security-aware visual models that follow the UML specification. This facilitates formulation and testing of prototype security policy specifications in a faster and more reliable manner than is possible with existing manual approaches.

• Type: Journal
• Year: 2010
• Where: DMS
• Authors: Aditi Patwardhan, Kevin W. Hamlen, Kendra Cooper
• Keywords: Binary Code, DMS 2010, Multimedia, Policy Specifications, Reference Monitoring Frameworks