Modern distributed systems are composed from several off-the-shelf components, including
operating systems, virtualization infrastructure, and application packages, upon which some …

Protection deals with the enforcement of integrity and confidentiality. Integrity violations often
lead to confidentiality vulnerabilities. This paper proposes a novel approach of Mandatory …

In this paper, we present an approach for analyzing the integrity protection in the SELinux
example policy. The SELinux example policy is intended as an example from which …

For decades, researchers have pointed out that Mandatory Access Control (MAC) is an
effective method to protect computer systems from being misused. Unfortunately, MAC is still …

We provide a largely automated system for verifying Clark-Wilson interprocess information-
flow integrity. Information-flow integrity properties are essential to isolate trusted processes …

Many users value applications that continue execution in the face of attacks. Current
software protection techniques typically abort a process after an intrusion attempt (eg, a …

In this paper, we develop an approach for protecting system integrity from untrusted code
that may harbor sophisticated malware. We develop a novel dual-sandboxing architecture to …

Host compromise is a serious security problem for operating systems. Most previous
solutions based on integrity protection models are difficult to use; on the other hand, usable …

For decades, researchers have pointed out that Mandatory Access Control (MAC) is an
effective method to protect computer systems from being misused. Unfortunately, MAC is still …

Operating systems must be flexible in their support for security policies, providing sufficient
mechanisms for supporting the wide variety of real-world security policies. Such flexibility …