ASM: application security monitor

Authors:
Micha Moffie;David Kaeli
Affiliations:
Northeastern University, Boston, MA;Northeastern University, Boston, MA
Venue:
ACM SIGARCH Computer Architecture News - Special issue on the 2005 workshop on binary instrumentation and application
Year:
2005

Citing 13
Cited 1

History-based access control for mobile code

CCS '98 Proceedings of the 5th ACM conference on Computer and communications security
JFlow: practical mostly-static information flow control

Proceedings of the 26th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
A lattice model of secure information flow

Communications of the ACM
Intrusion Detection via System Call Traces

IEEE Software
Secure Execution via Program Shepherding

Proceedings of the 11th USENIX Security Symposium
Safe Virtual Execution Using Software Dynamic Translation

ACSAC '02 Proceedings of the 18th Annual Computer Security Applications Conference
Secure program execution via dynamic information flow tracking

ASPLOS XI Proceedings of the 11th international conference on Architectural support for programming languages and operating systems
RIFLE: An Architectural Framework for User-Centric Information-Flow Security

Proceedings of the 37th annual IEEE/ACM International Symposium on Microarchitecture
Pin: building customized program analysis tools with dynamic instrumentation

Proceedings of the 2005 ACM SIGPLAN conference on Programming language design and implementation
Attack Trends: 2004 and 2005

Queue - Security
Detecting and countering system intrusions using software wrappers

SSYM'00 Proceedings of the 9th conference on USENIX Security Symposium - Volume 9
On gray-box program tracking for anomaly detection

SSYM'04 Proceedings of the 13th conference on USENIX Security Symposium - Volume 13
A secure environment for untrusted helper applications confining the Wily Hacker

SSYM'96 Proceedings of the 6th conference on USENIX Security Symposium, Focusing on Applications of Cryptography - Volume 6

A multi-core security architecture based on EFI

OTM'07 Proceedings of the 2007 OTM confederated international conference on On the move to meaningful internet systems: CoopIS, DOA, ODBASE, GADA, and IS - Volume Part II

Quantified Score

Hi-index	0.00

Visualization

Abstract

Our Application Security Monitor (ASM) is a run-time monitor that dynamically collects execution-related data. ASM is part of a security framework that will allow us to explore different security policies aimed at identifying malicious behavior such as Trojan horses and backdoors.In this paper, we show what type of data ASM can collect and illustrate how this data can be used to enforce a security policy. Using ASM we are able to explore different tradeoffs between security and performance.