Výsledky vyhledávání - "Frank Capobianco"

Types and Abstract Interpretation for Authorization Hook Advice

Autor: Frank Capobianco, David Darais, Christian Skalka, Trent Jaeger

Publikováno v: CSF

Authorization hooks are access control checks that prevent unauthorized principals from interacting with some protected resource, and are used extensively in critical software such as operating systems, middleware, and server programs. They are often

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_________::b7ccd85ecb3b4c114bdfac95fdd34f04
https://doi.org/10.1109/csf49147.2020.00018

Zobrazit plný text záznamu

Program-mandering

Autor: Yongzhe Huang, Frank Capobianco, Trent Jaeger, Shen Liu, Stephen McCamant, Gang Tan, Dongrui Zeng

Publikováno v: CCS

Privilege separation is an effective technique to improve software security. However, past partitioning systems do not allow programmers to make quantitative tradeoffs between security and performance. In this paper, we describe our toolchain called

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_________::004662fef11d6a49030d73b541642939
https://doi.org/10.1145/3319535.3354218

Zobrazit plný text záznamu

Employing attack graphs for intrusion detection

Autor: Frank Capobianco, Paul Yu, Zhiyun Qian, Kaiming Huang, Rahul George, Srikanth V. Krishnamurthy, Mathias Payer, Trent Jaeger

Publikováno v: NSPW

Intrusion detection systems are a commonly deployed defense that examines network traffic, host operations, or both to detect attacks. However, more attacks bypass IDS defenses each year, and with the sophistication of attacks increasing as well, we

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_dedup___::99f35d095ac87847c979bfddb5e0da40
https://doi.org/10.1145/3368860.3368862

Zobrazit plný text záznamu

On Risk in Access Control Enforcement

Autor: Christian Skalka, Trent Jaeger, Giuseppe Petracca, Frank Capobianco

Publikováno v: SACMAT

While we have long had principles describing how access control enforcement should be implemented, such as the reference monitor concept, imprecision in access control mechanisms and access control policies leads to risks that may enable exploitation

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_________::e19cdb96560bf5625f4fb66e2d3a0e73
https://doi.org/10.1145/3078861.3078872

Zobrazit plný text záznamu

Leveraging Data Provenance to Enhance Cyber Resilience

Autor: Adam Bates, Patrick T. Cable, Frank Capobianco, Trent Jaeger, Thomas Moyer, Nabil Schear, Kevin R. B. Butler, Karishma Chadha, Warren Smith, Robert K. Cunningham

Publikováno v: SecDev

Building secure systems used to mean ensuring a secure perimeter, but that is no longer the case. Today's systems are ill-equipped to deal with attackers that are able to pierce perimeter defenses. Data provenance is a critical technology in building

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_________::4b48df8d8c90f32282c50d76ed27ca6c
https://doi.org/10.1109/secdev.2016.034

Zobrazit plný text záznamu

Maintaining Authorization Hook Placements Across Program Versions

Autor: Frank Capobianco, Nirupama Talele, Gang Tan, Divya Muthukumaran, Trent Jaeger

Publikováno v: SecDev

We examine the problem of maintaining security code across program versions. There are now several cases where programmers manually retrofit their programs with security code, such as authorization mechanisms. However, programs evolve, so a challenge

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=doi_________::6fc65dc6bd65da7808035396d2323d27
https://doi.org/10.1109/secdev.2016.024

Zobrazit plný text záznamu

Vyhledávací nástroje:

Upřesnit hledání