SegSlice: towards a new class of secure programming primitives for trustworthy platforms

Authors:
Sergey Bratus;Michael E. Locasto;Brian Schulte
Affiliations:
Institute for Security, Technology, and Society, Dartmouth College, Hanover, NH;Computer Science Dept., George Mason University Arlington, VA;Computer Science Dept., George Mason University Arlington, VA
Venue:
TRUST'10 Proceedings of the 3rd international conference on Trust and trustworthy computing
Year:
2010

Citing 20
Cited 2

Integrating segmentation and paging protection for safe, efficient and transparent software extensions

Proceedings of the seventeenth ACM symposium on Operating systems principles
Setuid Demystified

Proceedings of the 11th USENIX Security Symposium
Secure Execution via Program Shepherding

Proceedings of the 11th USENIX Security Symposium
An infrastructure for adaptive dynamic optimization

Proceedings of the international symposium on Code generation and optimization: feedback-directed and runtime optimization
Using Memory Errors to Attack a Virtual Machine

SP '03 Proceedings of the 2003 IEEE Symposium on Security and Privacy
The Kernel Craze

IEEE Security and Privacy
Java(TM) Language Specification, The (3rd Edition) (Java (Addison-Wesley))

Java(TM) Language Specification, The (3rd Edition) (Java (Addison-Wesley))
Pin: building customized program analysis tools with dynamic instrumentation

Proceedings of the 2005 ACM SIGPLAN conference on Programming language design and implementation
An API for Runtime Code Patching

International Journal of High Performance Computing Applications
Control-flow integrity

Proceedings of the 12th ACM conference on Computer and communications security
Nooks: an architecture for reliable device drivers

EW 10 Proceedings of the 10th workshop on ACM SIGOPS European workshop
Valgrind: a framework for heavyweight dynamic binary instrumentation

Proceedings of the 2007 ACM SIGPLAN conference on Programming language design and implementation
Protected shared libraries: a new approach to modularity and sharing

ATEC '97 Proceedings of the annual conference on USENIX Annual Technical Conference
The geometry of innocent flesh on the bone: return-into-libc without function calls (on the x86)

Proceedings of the 14th ACM conference on Computer and communications security
Hype and virtue

HOTOS'07 Proceedings of the 11th USENIX workshop on Hot topics in operating systems
Vx32: lightweight user-level sandboxing on the x86

ATC'08 USENIX 2008 Annual Technical Conference on Annual Technical Conference
TOCTOU, Traps, and Trusted Computing

Trust '08 Proceedings of the 1st international conference on Trusted Computing and Trust in Information Technologies: Trusted Computing - Challenges and Applications
When good instructions go bad: generalizing return-oriented programming to RISC

Proceedings of the 15th ACM conference on Computer and communications security
Traps, events, emulation, and enforcement: managing the yin and yang of virtualization-based security

Proceedings of the 1st ACM workshop on Virtual machine security
Return-oriented rootkits: bypassing kernel code integrity protection mechanisms

SSYM'09 Proceedings of the 18th conference on USENIX security symposium

The diversity of TPMs and its effects on development: a case study of integrating the TPM into OpenSolaris

Proceedings of the fifth ACM workshop on Scalable trusted computing
Characterizing kernel malware behavior with kernel data access patterns

Proceedings of the 6th ACM Symposium on Information, Computer and Communications Security

Quantified Score

Hi-index	0.00

Visualization

Abstract

The TPM is a fairly passive entity. As a result, it can be difficult to involve the TPM in measurements of software trustworthiness beyond simple load-time hashing of static program code. We suggest an approach to dynamic, runtime measurement of software trustworthiness properties as they relate to code-data owernship relationships. We outline a system, SegSlice, that actively involves the TPM in fine-grained labeling and measurement of code slices and the data that these slices operate on. SegSlice requires no changes to x86 hardware, and it relies on the relatively underused x86 segmentation mechanism to mediate access to data events.