.png){kind=icon}
返回
Process Authentication for High System Assurance
.png){kind=icon}
OA
AI
DOI：10.1109/TDSC.2013.29.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
This paper points out the need in modern operating system kernels for a process authentication mechanism, where a process of a user-level application proves its identity to the kernel. Process authentication is different from process identification. Identification is a way to describe a principal; PIDs or process names are identifiers for processes in an OS environment. However, the information such as process names or executable paths that is conventionally used by OS to identify a process is not reliable. As a result, malware may impersonate other processes, thus violating system assurance. We propose a lightweight secure application authentication framework in which user-level applications are required to present proofs at runtime to be authenticated to the kernel. To demonstrate the application of process authentication, we develop a system call monitoring framework for preventing unauthorized use or access of system resources. It verifies the identity of processes before completing the requested system calls. We implement and evaluate a prototype of our monitoring architecture in Linux. The results from our extensive performance evaluation show that our prototype incurs reasonably low overhead, indicating the feasibility of our approach for cryptographically authenticating applications and their processes in the operating system.
Keyword:
Operating system security
process authentication
secret application credential
system call monitoring
期刊
IF:
7.5
论文数:
2.4K
被引数:
9.6K
机构
引用论文
Personal characteristics relating to risk of invasive epithelial ovarian cancer in older women in the United States.png)
Cancer
CancerIF0
PREAI
分享收藏
查看更多内容