Comprehensive integrity protection for desktop Linux

Wai Kit Sze; R. Sekar

doi:10.1145/2613087.2613112

Comprehensive integrity protection for desktop Linux

Wai Kit Sze
, R. Sekar

Computer Science

Stony Brook University

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

Information flow provides principled defenses against malware. It can provide system-wide integrity protection without requiring any program-specific understanding. Information flow policies have been around for 40+ years but they have not been explored in today's context. Specifically, they are not designed for contemporary software and OSes. Applying these policies directly on today's OSes affects usability. In this paper, we focus our attention on an information-flow based integrity protection system that we implemented for Linux, with the goal of minimizing usability impact. We discuss the design decisions made in this system and provide insights on building usable information flow systems.

Original language	English
Title of host publication	SACMAT 2014 - Proceedings of the 19th ACM Symposium on Access Control Models and Technologies
Publisher	Association for Computing Machinery
Pages	89-92
Number of pages	4
ISBN (Print)	9781450329392, 9781450329392
DOIs	https://doi.org/10.1145/2613087.2613112
State	Published - 2014
Event	19th ACM Symposium on Access Control Models and Technologies, SACMAT 2014 - London, ON, Canada Duration: Jun 25 2014 → Jun 27 2014

Publication series

Name	Proceedings of ACM Symposium on Access Control Models and Technologies, SACMAT

Conference

Conference	19th ACM Symposium on Access Control Models and Technologies, SACMAT 2014
Country/Territory	Canada
City	London, ON
Period	06/25/14 → 06/27/14

Access to Document

10.1145/2613087.2613112

Cite this

@inproceedings{ed57309e9f01427898e28ff725e4524b,

title = "Comprehensive integrity protection for desktop Linux",

abstract = "Information flow provides principled defenses against malware. It can provide system-wide integrity protection without requiring any program-specific understanding. Information flow policies have been around for 40+ years but they have not been explored in today's context. Specifically, they are not designed for contemporary software and OSes. Applying these policies directly on today's OSes affects usability. In this paper, we focus our attention on an information-flow based integrity protection system that we implemented for Linux, with the goal of minimizing usability impact. We discuss the design decisions made in this system and provide insights on building usable information flow systems.",

author = "Sze, \{Wai Kit\} and R. Sekar",

year = "2014",

doi = "10.1145/2613087.2613112",

language = "English",

isbn = "9781450329392",

series = "Proceedings of ACM Symposium on Access Control Models and Technologies, SACMAT",

publisher = "Association for Computing Machinery",

pages = "89--92",

booktitle = "SACMAT 2014 - Proceedings of the 19th ACM Symposium on Access Control Models and Technologies",

note = "19th ACM Symposium on Access Control Models and Technologies, SACMAT 2014 ; Conference date: 25-06-2014 Through 27-06-2014",

}

Sze, WK & Sekar, R 2014, Comprehensive integrity protection for desktop Linux. in SACMAT 2014 - Proceedings of the 19th ACM Symposium on Access Control Models and Technologies. Proceedings of ACM Symposium on Access Control Models and Technologies, SACMAT, Association for Computing Machinery, pp. 89-92, 19th ACM Symposium on Access Control Models and Technologies, SACMAT 2014, London, ON, Canada, 06/25/14. https://doi.org/10.1145/2613087.2613112

Comprehensive integrity protection for desktop Linux. / Sze, Wai Kit; Sekar, R.
SACMAT 2014 - Proceedings of the 19th ACM Symposium on Access Control Models and Technologies. Association for Computing Machinery, 2014. p. 89-92 (Proceedings of ACM Symposium on Access Control Models and Technologies, SACMAT).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Comprehensive integrity protection for desktop Linux

AU - Sze, Wai Kit

AU - Sekar, R.

PY - 2014

Y1 - 2014

N2 - Information flow provides principled defenses against malware. It can provide system-wide integrity protection without requiring any program-specific understanding. Information flow policies have been around for 40+ years but they have not been explored in today's context. Specifically, they are not designed for contemporary software and OSes. Applying these policies directly on today's OSes affects usability. In this paper, we focus our attention on an information-flow based integrity protection system that we implemented for Linux, with the goal of minimizing usability impact. We discuss the design decisions made in this system and provide insights on building usable information flow systems.

AB - Information flow provides principled defenses against malware. It can provide system-wide integrity protection without requiring any program-specific understanding. Information flow policies have been around for 40+ years but they have not been explored in today's context. Specifically, they are not designed for contemporary software and OSes. Applying these policies directly on today's OSes affects usability. In this paper, we focus our attention on an information-flow based integrity protection system that we implemented for Linux, with the goal of minimizing usability impact. We discuss the design decisions made in this system and provide insights on building usable information flow systems.

UR - https://www.scopus.com/pages/publications/84904480282

U2 - 10.1145/2613087.2613112

DO - 10.1145/2613087.2613112

M3 - Conference contribution

AN - SCOPUS:84904480282

SN - 9781450329392

T3 - Proceedings of ACM Symposium on Access Control Models and Technologies, SACMAT

SP - 89

EP - 92

BT - SACMAT 2014 - Proceedings of the 19th ACM Symposium on Access Control Models and Technologies

PB - Association for Computing Machinery

T2 - 19th ACM Symposium on Access Control Models and Technologies, SACMAT 2014

Y2 - 25 June 2014 through 27 June 2014

ER -

Comprehensive integrity protection for desktop Linux

Abstract

Publication series

Conference

Access to Document

Other files and links

Fingerprint

Cite this