Native Client: A Sandbox for Portable, Untrusted x86 Native Code

Authors:
Bennet Yee;David Sehr;Gregory Dardyk;J. Bradley Chen;Robert Muth;Tavis Ormandy;Shiki Okasaka;Neha Narula;Nicholas Fullagar
Affiliations:
-;-;-;-;-;-;-;-;-
Venue:
SP '09 Proceedings of the 2009 30th IEEE Symposium on Security and Privacy
Year:
2009

Citing 0
Cited 72

Browser security: lessons from Google Chrome

Communications of the ACM - A Blind Person's Interaction with Technology
Browser Security: Lessons from Google Chrome

Queue - Distributed Computing
Preventing drive-by download via inter-module communication monitoring

ASIACCS '10 Proceedings of the 5th ACM Symposium on Information, Computer and Communications Security
Sentry: light-weight auxiliary memory access control

Proceedings of the 37th annual international symposium on Computer architecture
N-version disassembly: differential testing of x86 disassemblers

Proceedings of the 19th international symposium on Software testing and analysis
Refactoring human roles solves systems problems

HotCloud'09 Proceedings of the 2009 conference on Hot topics in cloud computing
Convergence of desktop and web applications on a multi-service OS

HotSec'09 Proceedings of the 4th USENIX conference on Hot topics in security
Bringing P2P to the web: security and privacy in the firecoral network

IPTPS'09 Proceedings of the 8th international conference on Peer-to-peer systems
The multi-principal OS construction of the gazelle web browser

SSYM'09 Proceedings of the 18th conference on USENIX security symposium
Separating web applications from user data storage with BSTORE

WebApps'10 Proceedings of the 2010 USENIX conference on Web application development
Robusta: taming the native beast of the JVM

Proceedings of the 17th ACM conference on Computer and communications security
Return-oriented programming without returns

Proceedings of the 17th ACM conference on Computer and communications security
Johnny can drag and drop: determining user intent through traditional interactions to improve desktop security

Proceedings of the 4th Symposium on Computer Human Interaction for the Management of Information Technology
VM-based security overkill: a lament for applied systems security research

Proceedings of the 2010 workshop on New security paradigms
Flexible in-lined reference monitor certification: challenges and future directions

Proceedings of the 5th ACM workshop on Programming languages meets program verification
Adapting software fault isolation to contemporary CPU architectures

USENIX Security'10 Proceedings of the 19th USENIX conference on Security
Making Linux protection mechanisms egalitarian with UserFS

USENIX Security'10 Proceedings of the 19th USENIX conference on Security
Securing script-based extensibility in web browsers

USENIX Security'10 Proceedings of the 19th USENIX conference on Security
Attribution of malicious behavior

ICISS'10 Proceedings of the 6th international conference on Information systems security
Introducing mobile devices into Grid systems: a survey

International Journal of Web and Grid Services
Distributed data usage control for web applications: a social network implementation

Proceedings of the first ACM conference on Data and application security and privacy
Rethinking the library OS from the top down

Proceedings of the sixteenth international conference on Architectural support for programming languages and operating systems
Fine-grained user-space security through virtualization

Proceedings of the 7th ACM SIGPLAN/SIGOPS international conference on Virtual execution environments
Privad: practical privacy in online advertising

Proceedings of the 8th USENIX conference on Networked systems design and implementation
Generalized just-in-time trace compilation using a parallel task farm in a dynamic binary translator

Proceedings of the 32nd ACM SIGPLAN conference on Programming language design and implementation
Language-independent sandboxing of just-in-time compilation and self-modifying code

Proceedings of the 32nd ACM SIGPLAN conference on Programming language design and implementation
VAMOS: virtualization aware middleware

WIOV'11 Proceedings of the 3rd conference on I/O virtualization
C3: an experimental, extensible, reconfigurable platform for HTML-based applications

WebApps'11 Proceedings of the 2nd USENIX conference on Web application development
Maverick: providing web applications with safe and flexible access to local devices

WebApps'11 Proceedings of the 2nd USENIX conference on Web application development
Atlantis: robust, extensible execution environments for web applications

SOSP '11 Proceedings of the Twenty-Third ACM Symposium on Operating Systems Principles
Combining control-flow integrity and static analysis for efficient and validated data sandboxing

Proceedings of the 18th ACM conference on Computer and communications security
Emscripten: an LLVM-to-JavaScript compiler

Proceedings of the ACM international conference companion on Object oriented programming systems languages and applications companion
The web interface should be radically refactored

Proceedings of the 10th ACM Workshop on Hot Topics in Networks
AdSentry: comprehensive and flexible confinement of JavaScript-based advertisements

Proceedings of the 27th Annual Computer Security Applications Conference
Path-exploration lifting: hi-fi tests for lo-fi emulators

ASPLOS XVII Proceedings of the seventeenth international conference on Architectural Support for Programming Languages and Operating Systems
Jutge.org: an educational programming judge

Proceedings of the 43rd ACM technical symposium on Computer Science Education
Isolating commodity hosted hypervisors with HyperLock

Proceedings of the 7th ACM european conference on Computer Systems
Octopus: An Upperware based system for building personal pervasive environments

Journal of Systems and Software
Representation-Independent data usage control

DPM'11 Proceedings of the 6th international conference, and 4th international conference on Data Privacy Management and Autonomous Spontaneus Security
Jasmin: an alternative for secure modularity inside the digital home

Proceedings of the 15th ACM SIGSOFT symposium on Component Based Software Engineering
Redactable Signatures for Signed CDA Documents

Journal of Medical Systems
TreeHouse: JavaScript sandboxes to helpWeb developers help themselves

USENIX ATC'12 Proceedings of the 2012 USENIX conference on Annual Technical Conference
Binary stirring: self-randomizing instruction addresses of legacy x86 binary code

Proceedings of the 2012 ACM conference on Computer and communications security
Enforcing user-space privilege separation with declarative architectures

Proceedings of the seventh ACM workshop on Scalable trusted computing
Dune: safe user-level access to privileged CPU features

OSDI'12 Proceedings of the 10th USENIX conference on Operating Systems Design and Implementation
FreeDOM: a new baseline for the web

Proceedings of the 11th ACM Workshop on Hot Topics in Networks
Fathom: a browser-based network measurement platform

Proceedings of the 2012 ACM conference on Internet measurement conference
Securing untrusted code via compiler-agnostic binary rewriting

Proceedings of the 28th Annual Computer Security Applications Conference
Model-Based usage control policy derivation

ESSoS'13 Proceedings of the 5th international conference on Engineering Secure Software and Systems
InkTag: secure applications on an untrusted operating system

Proceedings of the eighteenth international conference on Architectural support for programming languages and operating systems
Whose cache line is it anyway?: operating system support for live detection and repair of false sharing

Proceedings of the 8th ACM European Conference on Computer Systems
Embassies: radically refactoring the web

nsdi'13 Proceedings of the 10th USENIX conference on Networked Systems Design and Implementation
PSiOS: bring your own privacy & security to iOS devices

Proceedings of the 8th ACM SIGSAC symposium on Information, computer and communications security
Efficient user-space information flow control

Proceedings of the 8th ACM SIGSAC symposium on Information, computer and communications security
JNICodejail: native code isolation for Java programs

Proceedings of the 2013 International Conference on Principles and Practices of Programming on the Java Platform: Virtual Machines, Languages, and Tools
Monitor integrity protection with space efficiency and separate compilation

Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security
Librando: transparent code randomization for just-in-time compilers

Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security
Content-based isolation: rethinking isolation policy design on client systems

Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security
A versatile code execution isolation framework with security first

Proceedings of the 2013 ACM workshop on Cloud computing security workshop
Control-flow restrictor: compiler-based CFI for iOS

Proceedings of the 29th Annual Computer Security Applications Conference
Securing legacy firefox extensions with SENTINEL

DIMVA'13 Proceedings of the 10th international conference on Detection of Intrusions and Malware, and Vulnerability Assessment
Preventing backdoors in server applications with a separated software architecture

DIMVA'13 Proceedings of the 10th international conference on Detection of Intrusions and Malware, and Vulnerability Assessment
Control flow integrity for COTS binaries

SEC'13 Proceedings of the 22nd USENIX conference on Security
Strato: a retargetable framework for low-level inlined-reference monitors

SEC'13 Proceedings of the 22nd USENIX conference on Security
Jekyll on iOS: when benign apps become evil

SEC'13 Proceedings of the 22nd USENIX conference on Security
How to run POSIX apps in a minimal picoprocess

USENIX ATC'13 Proceedings of the 2013 USENIX conference on Annual Technical Conference
Bringing java's wild native world under control

ACM Transactions on Information and System Security (TISSEC)
Booby trapping software

Proceedings of the 2013 workshop on New security paradigms workshop
New hands-on labs on browser security (abstract only)

Proceedings of the 45th ACM technical symposium on Computer science education
Compac: enforce component-level access control in android

Proceedings of the 4th ACM conference on Data and application security and privacy
PREC: practical root exploit containment for android devices

Proceedings of the 4th ACM conference on Data and application security and privacy
A platform for secure static binary instrumentation

Proceedings of the 10th ACM SIGPLAN/SIGOPS international conference on Virtual execution environments

Quantified Score

Hi-index	0.00

Visualization

Abstract

The Mifare Classic is the most widely used contactless smartcard on the market.The stream cipher CRYPTO1 used by the Classic has recently been reverse engineered and serious attacks have been proposed. The most serious of them retrieves a secret key ...