Self-signed executables: restricting replacement of program binaries by malware

Authors:
Glenn Wurster;P. C. van Oorschot
Affiliations:
School of Computer Science, Carleton University, Canada;School of Computer Science, Carleton University, Canada
Venue:
HOTSEC'07 Proceedings of the 2nd USENIX workshop on Hot topics in security
Year:
2007

Citing 12
Cited 6

The design and implementation of tripwire: a file system integrity checker

CCS '94 Proceedings of the 2nd ACM Conference on Computer and communications security
A logical reconstruction of SPKI

Journal of Computer Security - Special issue on CSFW14
Signed kernel modules

Linux Journal
Detecting Kernel-Level Rootkits Through Binary Analysis

ACSAC '04 Proceedings of the 20th Annual Computer Security Applications Conference
DigSig: Runtime Authentication of Binaries at Kernel Level

LISA '04 Proceedings of the 18th USENIX conference on System administration
Detecting Stealth Software with Strider GhostBuster

DSN '05 Proceedings of the 2005 International Conference on Dependable Systems and Networks
Detecting past and present intrusions through vulnerability-specific predicates

Proceedings of the twentieth ACM symposium on Operating systems principles
Towards Protecting Sensitive Files in a Compromised System

SISW '05 Proceedings of the Third IEEE International Security in Storage Workshop
Storage-based intrusion detection: watching storage activity for suspicious behavior

SSYM'03 Proceedings of the 12th conference on USENIX Security Symposium - Volume 12
Copilot - a coprocessor-based kernel runtime integrity monitor

SSYM'04 Proceedings of the 13th conference on USENIX Security Symposium - Volume 13
Lurking in the Shadows: Identifying Systemic Threats to Kernel Data

SP '07 Proceedings of the 2007 IEEE Symposium on Security and Privacy
An architecture for specification-based detection of semantic integrity violations in kernel dynamic data

USENIX-SS'06 Proceedings of the 15th conference on USENIX Security Symposium - Volume 15

A look in the mirror: attacks on package managers

Proceedings of the 15th ACM conference on Computer and communications security
System configuration as a privilege

HotSec'09 Proceedings of the 4th USENIX conference on Hot topics in security
A control point for reducing root abuse of file-system privileges

Proceedings of the 17th ACM conference on Computer and communications security
Cross-application data provenance and policy enforcement

ACM Transactions on Information and System Security (TISSEC)
Towards a binary integrity system for windows

Proceedings of the 6th ACM Symposium on Information, Computer and Communications Security
CodeShield: towards personalized application whitelisting

Proceedings of the 28th Annual Computer Security Applications Conference

Quantified Score

Hi-index	0.00

Visualization

Abstract

Current phishing attacks focus primarily on stealing user credentials such as passwords. In response, web sites are deploying stronger authentication and back-end analytics systems that make it harder for phishers to extract value from stolen passwords. ...