Verification of Security-Relevant Behavior Model and Security Policy for Model-Carrying Code

  • Yonglong Wei
  • Xiaojuan Zheng
  • Jinglei Ren
  • Xudong Zheng
  • Chen Sun
  • Zhenhao Li
Part of the Communications in Computer and Information Science book series (CCIS, volume 58)

Abstract

This article presents a method of verifying the safety of untrusted mobile code, using the model of security-relevant behaviors of code. This method verifies whether models violate users’ security policies to help users decide which programs to run and which not, and hence ensures the security of users’ systems and devices. Based on the framework of model-carrying code, we make several improvements: using the extended pushdown automaton (EPDA) as the program behavior model, reducing ambiguity in regular expressions over events (REE), proposing a new verification algorithm according to above significant improvements.

Keywords

mobile code security verification behavior model security policy model-carrying code 

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. 1.
    Sekar, R., Venkatakrishnan, V.N., Basu, S., Bhatkar, S., DuVarney, D.C.: Model-Carrying Code: A Practical Approach for Safe Execution of Untrusted Applications. In: Proceedings of the nineteenth ACM symposium on Operating systems principles, pp. 15–28. ACM, New York (2003)CrossRefGoogle Scholar
  2. 2.
    Giffin, J.T.: Model-based Intrusion Detection System Design And Evaluation, PhD thesis. University of Wisconsin-Madison (2006)Google Scholar
  3. 3.
    Necula, G.: Proof-Carry Code. In: ACM Symposium Principles of Programming Languages, POPL (1997)Google Scholar
  4. 4.
    Uppuluri, P.: Intrusion Detection/Prevention Using Behavior Specifications. PhD thesis, Stony Brook University (2003)Google Scholar
  5. 5.
    Hallaraker, O., Vigna, G.: Detecting Malicious JavaScript Code in Mozilla. In: Proceedings of 10th IEEE International Conference on Engineering of Complex Computer Systems, ICECCS 2005, pp. 85–94 (2005)Google Scholar
  6. 6.
    Cohen, S., Franco, R.: ActiveX Security: Improvements and Best Practices. MSDN (2006)Google Scholar
  7. 7.
    Wagner, D., Soto, P.: Mimicry Attacks on Host-based Intrusion Detection Systems. In: 9th ACM Conference on Computer and Communication Security (CCS), Washington, DC (2002)Google Scholar
  8. 8.
    Laurikari, V.: NFAs with Tagged Transitions, their Conversion to Deterministic Automata and Application to Regular Expressions. In: Proc. of the Seventh Intl. Symp.on String Processing and Information Retrieval (SPIRE 2000), pp. 181–187. IEEE, Los Alamitos (2000)CrossRefGoogle Scholar
  9. 9.
    Kotz, D., Gray, R.S.: Mobile Agents and the Future of the Internet. Operating Systems Review 33, 7–13 (1999)CrossRefGoogle Scholar

Copyright information

© Springer-Verlag Berlin Heidelberg 2009

Authors and Affiliations

  • Yonglong Wei
    • 1
  • Xiaojuan Zheng
    • 1
  • Jinglei Ren
    • 1
  • Xudong Zheng
    • 1
  • Chen Sun
    • 1
  • Zhenhao Li
    • 1
  1. 1.School of SoftwareNortheast Normal UniversityChangchunChina

Personalised recommendations