A Secure Environment for Untrusted Helper Applications (Confining the Wily Hacker)

A Secure Environment for Untrusted Helper Applications Connning the Wily Hacker

Many popular programs, such as Netscape, use un-trusted helper applications to process data from the network. Unfortunately, the unauthenticated network data they interpret could well have been created by an adversary, and the helper applications are usually too complex to be bug-free. This raises sig-niicant security concerns. Therefore, it is desirable to create a secure environment to contai...

A Secure Environment for Untrusted Helper Applications

Many popular programs, such as Netscape, use untrusted helper applications to process data from the network. Unfortunately, the unauthenticated network data they interpret could well have been created by an adversary, and the helper applications are usually too complex to be bug-free. This raises signi cant security concerns. Therefore, it is desirable to create a secure environment to contain ...

Fighting the Wily Hacker: Modeling Information Security Issues for On-line Financial Institutions using the SEAS Environment

A Secure Jailing System for Confining Untrusted Applications

System call interception based jailing is a well-known method for confining (sandboxing) untrusted binary applications. Existing systems that are implemented using standard UNIX debugging mechanisms are rendered insecure by several race conditions. This paper gives an overview of the most important threats to jailing systems, and presents novel mechanisms for implementing jailing securely on st...

Research Directions for Network Intrusion Recovery

One of the most significant unsolved problems for network managers and system administrators is how to repair a network infrastructure after discovering evidence of an extensive compromise. The technical issues are compounded by a breathtaking variety of human factors. We highlight lessons learned from three real, significant, and recent intrusion incidents. We do so as a way to expose the diff...