Clean Application Compartmentalization with SOAAP

被引：38

作者：

Gudka, Khilan ^{[1
]}

Watson, Robert N. M. ^{[1
]}

Anderson, Jonathan ^{[2
]}

Chisnall, David ^{[1
]}

Davis, Brooks ^{[3
]}

Laurie, Ben ^{[4
]}

Marinos, Ilias ^{[1
]}

Neumann, Peter G. ^{[3
]}

Richardson, Alex ^{[1
]}

机构：

[1] Univ Cambridge, Cambridge, England

[2] Mem Univ, St John, NF, Canada

[3] SRI Int, Menlo Pk, CA 94025 USA

[4] Google UK Ltd, London, England

来源：

CCS'15: PROCEEDINGS OF THE 22ND ACM SIGSAC CONFERENCE ON COMPUTER AND COMMUNICATIONS SECURITY | 2015年

基金：

英国工程与自然科学研究理事会; 加拿大自然科学与工程研究理事会;

关键词：

Security; Compartmentalization; Vulnerability Mitigation;

D O I：

10.1145/2810103.2813611

中图分类号：

TP [自动化技术、计算机技术];

学科分类号：

0812 ;

摘要：

Application compartmentalization, a vulnerability mitigation technique employed in programs such as OpenSSH and the Chromium web browser, decomposes software into isolated components to limit privileges leaked or otherwise available to attackers. However, compartmentalizing applications and maintaining that compartmentalization is hindered by ad hoc methodologies and significantly increased programming effort. In practice, programmers stumble through (rather than overtly reason about) compartmentalization spaces of possible decompositions, unknowingly trading off correctness, security, complexity, and performance. We present a new conceptual framework embodied in an LLVM-based tool: the Security-Oriented Analysis of Application Programs (SOAAP) that allows programmers to reason about compartmentalization using source-code annotations (compartmentalization hypotheses). We demonstrate considerable benefit when creating new compartmentalizations for complex applications, and analyze existing compartmentalized applications to discover design faults and maintenance issues arising from application evolution.

引用

页码：1016 / 1031

页数：16

共 41 条

[11] Bittau Andrea, 2008, 5 USENIX S NETW SYST
[12] Boebert W., 1985, P 8 DOD NBS COMP SEC
[13] PROGRAMMING SEMANTICS FOR MULTIPROGRAMMED COMPUTATIONS
DENNIS, JB
VANHORN, EC
[J]. COMMUNICATIONS OF THE ACM, 1966, 9 (03) : 143 - &
[14] Dolan S., JQ ALIGHTWEIGHT EXIB
[15] Gong L., 1997, P S INT TECHN SYST U
[16] Gudka K., 2015, UCAMCLTR873
[17] Hamilton G., 1993, P 1993 SUMM US C USE
[18] Harris W. R., 2011, 1694 U WISC MAD JUL
[19] Jurczyk M., 2014, GOOGLE ONLINE SE JAN
[20] Kamp Poul-Henning., 2000, P 2 INT SANE C

← 1 2 3 4 5 →