NDLI: Integrity walls: finding attack surfaces from mandatory access control policies

Please wait, while we are loading the content...

Protection, usability and improvements in reflected XSS filters

Ciphertext policy attribute-based encryption from lattices

Forgery-resilience for digital signature schemes

Adding query privacy to robust DHTs

Private and oblivious set and multiset operations

CARMA: a hardware tamper-resistant isolated execution environment on commodity x86 platforms

User-level secure deletion on log-structured file systems

AdDroid: privilege separation for applications and advertisers in Android

Towards efficient proofs of retrievability

A closer look at keyboard acoustic emanations: random passwords, typing styles and decoding techniques

An independent validation of vulnerability discovery models

Expressive CP-ABE with partially hidden access structures

Verifier-local revocation group signatures with time-bound keys

On sampling, anonymization, and differential privacy or, k-anonymization meets differential privacy

Practical client puzzles in the standard model

CloudER: a framework for automatic software vulnerability location and patching in the cloud

ClusterFA: a memory-efficient DFA structure for network intrusion detection

Constraint-enhanced role engineering via answer set programming

Boosting efficiency and security in proof of ownership for deduplication

Letting applications operate through attacks launched from compromised drivers

Virtual browser: a virtualized browser to sandbox third-party JavaScripts with enhanced security

New time-memory-data trade-off attack on the estream finalists and modes of operation of block ciphers

An identity authentication protocol in online social networks

Privacy-preserving alibi systems

Towards the attacker's view of protocol narrations (or, how to compile security protocols)

Monetizing spambot activity and understanding its relation with spambot traffic features

Discovering records of private VoIP calls without wiretapping

Integrity walls: finding attack surfaces from mandatory access control policies

Secure cloud maintenance: protecting workloads against insider attacks

Software decoys for insider threat

Memoirs of a browser: a cross-browser detection model for privacy-breaching extensions

An efficient broadcast attack against NTRU

On the mixing time of directed social graphs and security implications

Verifiable private equality test: enabling unbiased 2-party reconciliation on ordered sets in the malicious model

Carving secure wi-fi zones with defensive jamming

Adaptive semi-private email aliases

The specification and compilation of obligation policies for program monitoring

Outsourced private set intersection using homomorphic encryption

Coercion resistance in authentication responsibility shifting

FlashOver: automated discovery of cross-site scripting vulnerabilities in rich internet applications

Recursive partitioning and summarization: a practical framework for differentially private data publishing

Keeping identity secret in online social networks

CL-PRE: a certificateless proxy re-encryption scheme for secure data sharing with public cloud

PassMap: a map based graphical-password authentication system

Key-insulated symmetric key cryptography and mitigating attacks against cryptographic cloud software

Security implications in Kerberos by the introduction of smart cards

KoNKS: konsensus-style network koordinate system

Integrity walls: finding attack surfaces from mandatory access control policies

Content Provider	ACM Digital Library
Author	Jakka, Guruprasad Vijayakumar, Hayawardh Rueda, Sandra Jaeger, Trent Schiffman, Joshua
Abstract	Protecting host system integrity in the face of determined adversaries remains a major problem. Despite advances in program development and access control, attackers continue to compromise systems forcing security practitioners to regularly react to such breaches. While security practitioners may eventually learn which entry points in programs must be defended over a software's lifetime, new software and configuration options are frequently introduced, opening additional vulnerabilities to adversaries. The application developers' problem is to identify the program entry points accessible to adversaries and provide necessary defenses at these entry points before the adversaries use these to compromise the program. Unfortunately, this is a race that developers often lose. While some program vulnerable entry points are well-known (mostly network), the complexity of host systems makes it difficult to prevent local exploits should attackers gain control of any unprivileged processing. The question we explore in this paper is whether the program entry points accessible to adversaries can be found proactively, so defenses at these entry points can also be developed proactively.
Starting Page	75
Ending Page	76
Page Count	2
File Format	PDF
ISBN	9781450316484
DOI	10.1145/2414456.2414500
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2012-05-02
Publisher Place	New York
Access Restriction	Subscribed
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in