DMCA
Traps and Pitfalls: Practical Problems in System Call Interposition Based Security Tools (2003)
Cached
Download Links
- [www.stanford.edu]
- [www.isoc.org]
- [crypto.stanford.edu]
- DBLP
Other Repositories/Bibliography
| Venue: | In Proc. Network and Distributed Systems Security Symposium |
| Citations: | 137 - 1 self |
BibTeX
@INPROCEEDINGS{Garfinkel03trapsand,
author = {Tal Garfinkel},
title = {Traps and Pitfalls: Practical Problems in System Call Interposition Based Security Tools},
booktitle = {In Proc. Network and Distributed Systems Security Symposium},
year = {2003},
pages = {163--176}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
System call interposition is a powerful method for regulating and monitoring application behavior. In recent years, a wide variety of security tools have been developed that use this technique. This approach brings with it a host of pitfalls for the unwary implementer that if overlooked can allow his tool to be easily circumvented. To shed light on these problems, we present the lessons we learned in the course of several design and implementation cycles with our own system call interposition-based sandboxing tool. We first present some of the problems and pitfalls we encountered, including incorrectly replicating OS semantics, overlooking indirect paths to resources, race conditions, incorrectly subsetting a complex interface, and side effects of denying system calls. We then present some practical solutions to these problems, and provide general principles for avoiding the difficulties we encountered.
Keyphrases
security tool system call interposition practical problem application behavior unwary implementer race condition several design implementation cycle recent year complex interface practical solution powerful method wide variety side effect general principle indirect path o semantics system call interposition-based sandboxing tool
