Runtime Monitoring: From Theory to Usable Security

根据2013年诺顿报告，仅在2013年，网络犯罪就给加拿大造成了3亿美元以上的损失。 在全球范围内，成本估计达到1130亿美元。 因此，政府和行业都对开发保护敏感系统和数据的工具非常感兴趣。 安全监视是一种强制执行安全策略的方法，它通过观察不受信任的代码的执行并根据需要做出反应来防止违反用户提供的安全策略，从而寻求允许不受信任的代码安全地运行。 这种确保代码安全性的方法在实践中迅速获得认可，并且存在几种实现。这种扩散引起了学术界的兴趣，在科学文献中提出了许多有趣和创新的想法，使监视器成为一种有吸引力和强大的安全策略执行选项。这些想法的一些例子包括内存使用零开销的监视器，监视器认证（一种为监视器的正确执行提供用户可检查证明的技术）和信息流监视（一种与隐私相关的特定策略）。

According to the 2013 Norton Report, cyber-crime has cost Canadian upwards of 3 Bilion US$ in 2013 alone. Globally, the costs are estimated to reach 113 Billion US$. As a consequence, both government and industry have taken a keen interest in developing tools to protect sensitive systems and data. Runtime monitoring is an approach to enforcing security policies that seeks to allow untrusted code to run safely by observing its execution and reacting as needed to prevent a violation of a user-supplied security policy. This method of ensuring the safety of code is rapidly gaining acceptance in practice and several implementations exist. This proliferation has prompted interest from the academic community, and many interesting and innovative ideas have been proposed in the scientific literature to make monitors an attractive and powerful security policy enforcement option. A few examples of such ideas include monitors with zero overhead in memory usage, monitor certification—a technique to provide a user-checkable proof of the monitor’s correct enforcement, and the monitoring of information flow, a particular class of policies that relates to privacy.