NDLI: Runtime Enforcement of Security Policies on Black Box Reactive Programs

Please wait, while we are loading the content...

Automating Repetitive Tasks for the Masses

Functors are Type Refinement Systems

Runtime Enforcement of Security Policies on Black Box Reactive Programs

Summary-Based Context-Sensitive Data-Dependence Analysis in Presence of Callbacks

DReX: A Declarative Language for Efficiently Evaluating Regular String Transformations

Safe & Efficient Gradual Typing for TypeScript

Common Compiler Optimisations are Invalid in the C11 Memory Model and what we can do about it

A Formally-Verified C Static Analyzer

Polymorphic Functions with Set-Theoretic Types: Part 2: Local Type Inference and Type Reconstruction

Abstract Symbolic Automata: Mixed syntactic/semantic similarity analysis of executables

Programming up to Congruence

Proof Spaces for Unbounded Parallelism

K-Java: A Complete Semantics of Java

Coding by Everyone, Every Day

Databases and Programming: Two Subjects Divided by a Common Language?

Probabilistic Termination: Soundness, Completeness, and Compositionality

Full Abstraction for Signal Flow Graphs

Quantitative Interprocedural Analysis

Sound Modular Verification of C Code Executing in an Unverified Context

A Calculus for Relaxed Memory

Decentralizing SDN Policies

Integrating Linear and Dependent Types

Higher-Order Approximate Relational Refinement Types for Mechanism Design and Differential Privacy

Faster Algorithms for Algebraic Path Properties in Recursive State Machines with Constant Treewidth

Data-Parallel String-Manipulating Programs

Space-Efficient Manifest Contracts

From Communicating Machines to Graphical Choreographies

Analyzing Program Analyses

Principal Type Schemes for Gradual Programs

A Coalgebraic Decision Procedure for NetKAT

A Meta Lambda Calculus with Cross-Level Computation

Equations, Contractions, and Unique Solutions

Towards the Essence of Hygiene

Leveraging Weighted Automata in Compositional Reasoning about Concurrent Probabilistic Systems

Conjugate Hylomorphisms -- Or: The Mother of All Structured Recursion Schemes

Specification Inference Using Context-Free Language Reachability

Deep Specifications and Certified Abstraction Layers

Iris: Monoids and Invariants as an Orthogonal Basis for Concurrent Reasoning

Program Boosting: Program Synthesis via Crowd-Sourcing

Higher Inductive Types as Homotopy-Initial Algebras

Differential Privacy: Now it's Getting Personal

Predicting Program Properties from "Big Code"

Ur/Web: A Simple Model for Programming the Web

Manifest Contracts for Datatypes

A Scalable, Correct Time-Stamped Stack

Compositional CompCert

Dependent Information Flow Types

Symbolic Algorithms for Language Equivalence and Kleene Algebra with Tests

Algebraic Effects, Linearity, and Quantum Programming Languages

Succinct Representation of Concurrent Trace Sets

Self-Representation in Girard's System U

On Characterizing the Data Access Complexity of Programs

From Network Interface to Multithreaded Web Applications: A Case Study in Modular Program Verification

Tractable Refinement Checking for Concurrent Objects

Fiat: Deductive Synthesis of Abstract Data Types in a Proof Assistant

Runtime Enforcement of Security Policies on Black Box Reactive Programs

Content Provider	ACM Digital Library
Author	Milushev, Dimiter Massacci, Fabio Piessens, Frank Ngo, Minh
Abstract	Security enforcement mechanisms like execution monitors are used to make sure that some untrusted program complies with a policy. Different enforcement mechanisms have different strengths and weaknesses and hence it is important to understand the qualities of various enforcement mechanisms. This paper studies runtime enforcement mechanisms for reactive programs. We study the impact of two important constraints that many practical enforcement mechanisms satisfy: (1) the enforcement mechanism must handle each input/output event in finite time and on occurrence of the event (as opposed to for instance Ligatti's edit automata that have the power to buffer events for an arbitrary amount of time), and (2) the enforcement mechanism treats the untrusted program as a black box: it can monitor and/or edit the input/output events that the program exhibits on execution and it can explore alternative executions of the program by running additional copies of the program and providing these different inputs. It can not inspect the source or machine code of the untrusted program. Such enforcement mechanisms are important in practice: they include for instance many execution monitors, virtual machine monitors, and secure multi-execution or shadow executions. We establish upper and lower bounds for the class of policies that are enforceable by such black box mechanisms, and we propose a generic enforcement mechanism that works for a wide range of policies. We also show how our generic enforcement mechanism can be instantiated to enforce specific classes of policies, at the same time showing that many existing enforcement mechanisms are optimized instances of our construction.
Starting Page	43
Ending Page	54
Page Count	12
File Format	MPEG PDF
ISBN	9781450333009
DOI	10.1145/2676726.2676978
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2015-01-14
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Black box mechanism Reactive program Hypersafety policy Runtime enforcement
Content Type	Text Video
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Runtime Enforcement of Security Policies on Black Box Reactive Programs

Composing expressive runtime security policies

JVMTI-based implementation of security policies enforcement on java platform

Corrective Enforcement: A New Paradigm of Security Policy Enforcement by Monitors

CSPAutoGen: Black-box Enforcement of Content Security Policy upon Real-world Websites

Edit Automata: Enforcement Mechanisms for Run-time Security Policies (2003)

Edit Automata: Enforcement Mechanisms for Run-Time Security Policies (2005)

Edit Automata: Enforcement Mechanisms for Run-time Security Policies (2003)

Policy-driven reflective enforcement of security policies

Runtime Enforcement of Security Policies on Black Box Reactive Programs

Similar Documents

Runtime Enforcement of Security Policies on Black Box Reactive Programs

Composing expressive runtime security policies

JVMTI-based implementation of security policies enforcement on java platform

Corrective Enforcement: A New Paradigm of Security Policy Enforcement by Monitors

CSPAutoGen: Black-box Enforcement of Content Security Policy upon Real-world Websites

Edit Automata: Enforcement Mechanisms for Run-time Security Policies (2003)

Edit Automata: Enforcement Mechanisms for Run-Time Security Policies (2005)

Edit Automata: Enforcement Mechanisms for Run-time Security Policies (2003)

Policy-driven reflective enforcement of security policies

Runtime Enforcement of Security Policies on Black Box Reactive Programs