More Enforceable Security Policies更可执行的安全政策.pptVIP

Poly stop a hacker David Walker Princeton University (joint work with Lujo Bauer and Jay Ligatti) Language-Based Security language-based security mechanisms protect a host from untrusted applications analyzing or modifying application behavior static mechanisms (analysis at link time) type checking, proof checking, abstract interpretation dynamic mechanisms (analysis at run time) access-control lists, stack inspection, capabilities Language-Based Security language-based security mechanisms protect a host from untrusted applications by analyzing or modifying application behavior static mechanisms (analysis at link time) type checking, proof checking, abstract interpretation dynamic mechanisms (analysis at run time) access-control lists, stack inspection, capabilities Program Monitors A program monitor is a computation that runs in parallel with an untrusted application monitors detect, prevent, and recover from application errors at run time monitor decisions may be based on execution history we assume monitors have no knowledge of future application actions Program Monitors: Good Operations Program Monitors: Bad Operations Program Monitors: Bad Operations Program Monitors: Options A program monitor may do any of the following when it recognizes a dangerous operation: halt the application suppress (skip) the operation but allow the application to continue insert (perform) some computation on behalf of the application Past Research Program monitors have a lengthy history in the systems community OS kernels use hardware support secure fixed system-call interface mobile code architectures and safe languages (Java, CLR) more complex interactions between applications more diverse set of interfaces to secure more diverse set of policies necessary The Polymer Project Theoretical analysis of the range of the policies enforceable at run time Definition and implementation of a high-level policy language incorporate types, modularity and high-level programming technique