Sciweavers

Share
ESORICS
2005
Springer

Enforcing Non-safety Security Policies with Program Monitors

10 years 5 months ago
Enforcing Non-safety Security Policies with Program Monitors
We consider the enforcement powers of program monitors, which intercept security-sensitive actions of a target application at run time and take remedial steps whenever the target attempts to execute a potentially dangerous action. A common belief in the security community is that program monitors, regardless of the remedial steps available to them when detecting violations, can only enforce safety properties. We formally analyze the properties enforceable by various program monitors and find that although this belief is correct when considering monitors with simple remedial options, it is incorrect for more powerful monitors that can be modeled by edit automata. We define an interesting set of properties called infinite renewal properties and demonstrate how, when given any reasonable infinite renewal property, to construct an edit automaton that provably enforces that property. We analyze the set of infinite renewal properties and show that it includes every safety property, some...
Jay Ligatti, Lujo Bauer, David Walker
Added 27 Jun 2010
Updated 27 Jun 2010
Type Conference
Year 2005
Where ESORICS
Authors Jay Ligatti, Lujo Bauer, David Walker
Comments (0)
books