Matches in SemOpenAlex for { <https://semopenalex.org/work/W2167164768> ?p ?o ?g. }
- W2167164768 abstract "This thesis presents an innovative approach to implementing a security enforcement mechanism in the contexts of untrusted software systems, where a piece of code in a base system may come from an untrusted third party. The key point of the approach is that it is lightweight in the sense that it does not need an additional policy language or extra tool. Instead, the approach uses the aspect-oriented programming paradigm – a programmatic means to modify the behaviour of an application based on aspects – to specify security policies and embed the policies into untrusted software. As a result, security policies can be fine-grained and application-specific, and can be inlined into the untrusted software without modifying the base system, in order to detect and prevent unintended behaviour of the software at runtime. The approach has been elaborated in two particular untrusted software contexts in this thesis.Firstly, we have developed the approach in the context of a vehicle software architecture, where a third-party application can be installed and executed in a vehicle system. We have shown that various classes of fine-grained security policies can be specified and enforced in such a system by the approach. The security assurance provided by the enforcement mechanism is promising for deployment in an existing vehicle software system. Furthermore, we have identified a number of potential threats in the vehicle software architecture and developed countermeasures in terms of security policies. We have demonstrated the deployment of countermeasures to prevent possible attacks.Secondly, we have studied web application security. We propose a novel enforcement method called lightweight self-protecting JavaScript by applying the lightweight approach in the context of web security. The method prevents or modifies inappropriate behaviour of JavaScript execution in web pages by intercepting security relevant API calls. Unlike other approaches to enforcing policies for JavaScript, the enforcement and policy code are provided as a library and therefore do not require a modified browser. Furthermore, the approach does not employ runtime parsing or transformation of code, and thus has low runtime overhead. We also present an application of the method in the context of untrusted JavaScript such as mashups by proposing a two-tier sandbox architecture in which untrusted JavaScript code can be loaded and executed dynamically. The execution of untrusted code is monitored by modular and fine-grained security policies defined via an adaptation of self-protecting JavaScript to ensure security for the hosting page." @default.
- W2167164768 created "2016-06-24" @default.
- W2167164768 creator A5090788160 @default.
- W2167164768 date "2011-01-01" @default.
- W2167164768 modified "2023-09-27" @default.
- W2167164768 title "Lightweight Enforcement of Fine-Grained Security Policies for Untrusted Software" @default.
- W2167164768 cites W110366777 @default.
- W2167164768 cites W134410420 @default.
- W2167164768 cites W1489059369 @default.
- W2167164768 cites W1490386046 @default.
- W2167164768 cites W1496712790 @default.
- W2167164768 cites W1519936759 @default.
- W2167164768 cites W1522716660 @default.
- W2167164768 cites W1543587013 @default.
- W2167164768 cites W1552618981 @default.
- W2167164768 cites W1554476771 @default.
- W2167164768 cites W1579453661 @default.
- W2167164768 cites W1610570299 @default.
- W2167164768 cites W165061102 @default.
- W2167164768 cites W1839269954 @default.
- W2167164768 cites W1849635621 @default.
- W2167164768 cites W186100614 @default.
- W2167164768 cites W1916709771 @default.
- W2167164768 cites W191839766 @default.
- W2167164768 cites W1963971515 @default.
- W2167164768 cites W1970170564 @default.
- W2167164768 cites W1983741391 @default.
- W2167164768 cites W1984478483 @default.
- W2167164768 cites W1989453013 @default.
- W2167164768 cites W1995037566 @default.
- W2167164768 cites W1999552990 @default.
- W2167164768 cites W2006611045 @default.
- W2167164768 cites W2014248007 @default.
- W2167164768 cites W2029414465 @default.
- W2167164768 cites W2032095999 @default.
- W2167164768 cites W2034711041 @default.
- W2167164768 cites W2036910349 @default.
- W2167164768 cites W2037671236 @default.
- W2167164768 cites W2060576553 @default.
- W2167164768 cites W2060857434 @default.
- W2167164768 cites W2066859698 @default.
- W2167164768 cites W2068341689 @default.
- W2167164768 cites W2069107692 @default.
- W2167164768 cites W2075867419 @default.
- W2167164768 cites W2079029390 @default.
- W2167164768 cites W2103953153 @default.
- W2167164768 cites W2104568606 @default.
- W2167164768 cites W2106958114 @default.
- W2167164768 cites W2113539110 @default.
- W2167164768 cites W2116520617 @default.
- W2167164768 cites W2119736157 @default.
- W2167164768 cites W2120380522 @default.
- W2167164768 cites W2121194882 @default.
- W2167164768 cites W2121780525 @default.
- W2167164768 cites W2121964736 @default.
- W2167164768 cites W2123582298 @default.
- W2167164768 cites W2126319334 @default.
- W2167164768 cites W2128780623 @default.
- W2167164768 cites W2135446805 @default.
- W2167164768 cites W2135791304 @default.
- W2167164768 cites W2137689716 @default.
- W2167164768 cites W2139672701 @default.
- W2167164768 cites W2139913531 @default.
- W2167164768 cites W2141704790 @default.
- W2167164768 cites W2141935522 @default.
- W2167164768 cites W2141988808 @default.
- W2167164768 cites W2156250856 @default.
- W2167164768 cites W2156965348 @default.
- W2167164768 cites W2158557332 @default.
- W2167164768 cites W2160262526 @default.
- W2167164768 cites W2160463665 @default.
- W2167164768 cites W2162171351 @default.
- W2167164768 cites W2164055093 @default.
- W2167164768 cites W2164532721 @default.
- W2167164768 cites W2167056683 @default.
- W2167164768 cites W2168563136 @default.
- W2167164768 cites W2171296666 @default.
- W2167164768 cites W2253326339 @default.
- W2167164768 cites W2286816445 @default.
- W2167164768 cites W2295150383 @default.
- W2167164768 cites W2463767156 @default.
- W2167164768 cites W2499974232 @default.
- W2167164768 cites W25266476 @default.
- W2167164768 cites W2621025327 @default.
- W2167164768 cites W2900061950 @default.
- W2167164768 cites W295075549 @default.
- W2167164768 cites W32616104 @default.
- W2167164768 cites W36927914 @default.
- W2167164768 cites W44952850 @default.
- W2167164768 cites W46681494 @default.
- W2167164768 hasPublicationYear "2011" @default.
- W2167164768 type Work @default.
- W2167164768 sameAs 2167164768 @default.
- W2167164768 citedByCount "0" @default.
- W2167164768 crossrefType "dissertation" @default.
- W2167164768 hasAuthorship W2167164768A5090788160 @default.
- W2167164768 hasConcept C105339364 @default.
- W2167164768 hasConcept C111919701 @default.
- W2167164768 hasConcept C115903868 @default.
- W2167164768 hasConcept C147346212 @default.