Security-Oriented Analysis of Application Programs

Add to your list(s) Download to your calendar using vCal

• Khilan Gudka (University of Cambridge)
• Thursday 30 January 2014, 15:00-16:00
• SS03, Computer Laboratory, William Gates Builiding.

If you have a question about this talk, please contact Eiko Yoneki.

Application compartmentalization decomposes software into sandboxed components in order to mitigate security vulnerabilities, and has proven effective in limiting the impact of compromise. Experience shows, however, that compartmentalizing existing C-language software is difficult, triggering correctness, performance, and most critically, security problems.

This talk introduces Security-Oriented Analysis of Application Programs (SOAAP), a set of LLVM -based analysis and simulation techniques that support software developers in exploring broad compartmentalization spaces available for each application.

Programmers annotate source code with compartmentalization hypotheses that notify SOAAP of past vulnerabilities, security goals such as data confidentiality, performance objectives, and a proposed compartmentalization strategy. SOAAP then evaluates the hypothesis through a blend of static and dynamic analysis, informing the programmer of potential data consistency bugs, security policy violations and expected performance.

Bio: Khilan Gudka is a Research Associate in the Security group at the University of Cambridge Computer Laboratory. Prior to this he did his PhD at Imperial College London. His research interests include software compartmentalisation, capability systems, static/dynamic program analysis, compilers/runtimes and concurrency.

This talk is part of the Computer Laboratory Systems Research Group Seminar series.

This talk is included in these lists:

• All Talks (aka the CURE list)
• CL's SRG seminar
• Cambridge Centre for Data-Driven Discovery (C2D3)
• Cambridge talks
• Chris Davis' list
• Computer Laboratory Systems Research Group Seminar
• Department of Computer Science and Technology talks and seminars
• Interested Talks
• SS03, Computer Laboratory, William Gates Builiding
• School of Technology
• Trust & Technology Initiative - interesting events
• bld31
• ndk22's list
• ob366-ai4er
• rp587

Note that ex-directory lists are not shown.