Enforcing More with Less: Formalizing Target-Aware Run-Time Monitors

  • Yannis Mallios
  • Lujo Bauer
  • Dilsun Kaynar
  • Jay Ligatti
Conference paper

DOI: 10.1007/978-3-642-38004-4_2

Part of the Lecture Notes in Computer Science book series (LNCS, volume 7783)
Cite this paper as:
Mallios Y., Bauer L., Kaynar D., Ligatti J. (2013) Enforcing More with Less: Formalizing Target-Aware Run-Time Monitors. In: Jøsang A., Samarati P., Petrocchi M. (eds) Security and Trust Management. STM 2012. Lecture Notes in Computer Science, vol 7783. Springer, Berlin, Heidelberg

Abstract

Run-time monitors ensure that untrusted software and system behavior adheres to a security policy. This paper defines an expressive formal framework, based on I/O automata, for modeling systems, policies, and run-time monitors in more detail than is typical. We explicitly model, for example, the environment, applications, and the interaction between them and monitors. The fidelity afforded by this framework allows us to explicitly formulate and study practical constraints on policy enforcement that were often only implicit in previous models, providing a more accurate view of what can be enforced by monitoring in practice. We introduce two definitions of enforcement, target-specific and generalized, that allow us to reason about practical monitoring scenarios. Finally, we provide some meta-theoretical comparison of these definitions and we apply them to investigate policy enforcement in scenarios where the monitor designer has knowledge of the target application and show how this can be exploited to make more efficient design choices.

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Copyright information

© Springer-Verlag Berlin Heidelberg 2013

Authors and Affiliations

  • Yannis Mallios
    • 1
  • Lujo Bauer
    • 1
  • Dilsun Kaynar
    • 1
  • Jay Ligatti
    • 2
  1. 1.Carnegie Mellon UniversityPittsburghUSA
  2. 2.University of South FloridaTampaUSA

Personalised recommendations