SBIR Phase I: Securing Operating Systems Against Intruder Attacks

SBIR 第一阶段：保护操作系统免受入侵者攻击

• 批准号: 0128603
• 负责人: Umamaheswari Ganapathy
• 金额: $ 9.99万
• 依托单位: Immunet Security Solutions, Incorporated
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2002
• 资助国家: 美国
• 起止时间: 2002-01-01 至 2002-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0128603&HistoricalAwards=false
• 关键词: SBIR; Phase; Securing; Operating; Systems

This Small Business Innovation Research (SBIR) Phase I project addresses security of operating systems. This approach is based on developing specifications that capture security-relevant behaviors of programs, and constraining their execution to ensure adherence to these specifications. Since all security-relevant operations are administered through system calls, program behaviors are modeled in terms of sequences of system calls made by them, together with their arguments.The system will achieve enhanced security without compromising on functionality by (a) being able to protect against known as well as novel kinds of attacks, (b) maintaining a very low false-alarm rate, and (c) reduced maintenance needs.

这个小型企业创新研究（SBIR）第一阶段项目致力于操作系统的安全性。这种方法基于开发捕获程序的安全相关行为的规范，并约束它们的执行以确保遵守这些规范。由于所有与安全相关的操作都是通过系统调用来管理的，因此程序行为是根据它们所进行的系统调用序列以及它们的参数来建模的。通过（a）能够防止已知的以及新的攻击，（B）保持非常低的误报警率，以及（c）减少维护需求，系统将在不损害功能的情况下实现增强的安全性。