A Type System for Data-Flow Integrity on Windows Vista
Cryptography and Security
2008-12-18 v2 Operating Systems
Programming Languages
Abstract
The Windows Vista operating system implements an interesting model of multi-level integrity. We observe that in this model, trusted code can be blamed for any information-flow attack; thus, it is possible to eliminate such attacks by static analysis of trusted code. We formalize this model by designing a type system that can efficiently enforce data-flow integrity on Windows Vista. Typechecking guarantees that objects whose contents are statically trusted never contain untrusted values, regardless of what untrusted code runs in the environment. Some of Windows Vista's runtime access checks are necessary for soundness; others are redundant and can be optimized away.
Cite
@article{arxiv.0803.3230,
title = {A Type System for Data-Flow Integrity on Windows Vista},
author = {Avik Chaudhuri and Prasad Naldurg and Sriram Rajamani},
journal= {arXiv preprint arXiv:0803.3230},
year = {2008}
}