University of Cambridge > Talks.cam > Computer Laboratory Systems Research Group Seminar > Wedge: Splitting Applications into Reduced-Privilege Compartments

  Browse A-Z

Log in

Cambridge users (raven)details Other usersdetails No account?details

Information on

Subscribing to talksdetails Finding a talkdetails Adding a talkdetails Disseminating talksdetails Help and Documentationdetails

Wedge: Splitting Applications into Reduced-Privilege Compartments

Add to your list(s) Download to your calendar using vCal

If you have a question about this talk, please contact Eiko Yoneki.

Most applications today run as single processes, allowing successful attackers to access all of the process’s memory and sensitive data. We intend to reverse this situation by splitting applications into multiple compartments that hold no privileges by default, and allowing programmers to explicitly grant privileges and memory permissions, therefore controlling the damage of potential exploits. Our system Wedge is composed of two synergistic parts: the sthread OS primitives that allow programmers to create default-deny compartments with explicitly set privileges, and Crowbar, a tool that run-time analyzes existing applications to help identify potential sthreads along with their required memory and file descriptor permissions, allowing a simpler migration of existing code to sthreads. We applied sthreads to SSL -enabled Apache protecting the privacy of user data even against a powerful attacker can both exploit large part of the server and also act as a man-in-the-middle in the network; all at a 20—40% performance cost. Finally we describe a userland implementation of sthreads that does not sacrifice performance thanks to the careful (ab)use of UNIX AP Is.

Bio: Andrea Bittau is a PhD student at UCL working on operating system support for application security, supervised by Mark Handley and Brad Karp. His past projects include the fragmentation attack for 802.11 WEP networks, where an attacker can spoof and eavesdrop data without needing the WEP key, and developing the first open source Bluetooth sniffer, based on GNU radio.

This talk is part of the Computer Laboratory Systems Research Group Seminar series.

Tell a friend about this talk:

This talk is included in these lists:

Note that ex-directory lists are not shown.

Other lists

Study Group on a Langlands Correspondence for Loop Groups Michael Perkins Lecture Cambridge Interdisciplinary Reproduction Forum

Other talks

Consequences of melanoma heterogeneity and plasticity for T-cell directed immunotherapy: Lessons from mouse models 'A Twenty First century ancient Greek play': an interview with Helen Eastman, director of the 2013 Cambridge Greek play in Greek, currently in rehearsal. Art Speak Real-world Challenges In Electronic Systems: Pulling Through Innovation And Making Things Work Oi! Scientology! Church Of Fear roadshow. What's happening to the world?
 

© 2006-2013 Talks.cam, University of Cambridge. Contact Us | Help and Documentation | Privacy and Publicity