JISE

[1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14] [15] [16] [17] [18] [19] [20] [21] [22]

Journal of Information Science and Engineering, Vol. 31 No. 2, pp. 529-546

Principles of Data Flow Integrity: Specification and Enforcement

TOKTAM RAMEZANIFARKHANI AND MOHAMMADREZA RAZZAZI
Department of Computer Engineering and IT
Amirkabir University of Technology
424 Hafez Ave, 15875-4413, Tehran, Iran
E-mail: {t_ramezani; razzazi}@aut.ac.ir

Subverting runtime data flow is common in many current software attacks. Data Flow Integrity (DFI) is a policy whose satisfaction can prevent such attacks. This paper develops a formal foundation on DFI specification, and characteristics of its enforcement techniques with formulations of hypotheses and guarantees. Enforcement techniques are based on static analysis and program monitoring at runtime. This foundation can be used for practical satisfaction of DFI and help establish guarantees in every applied platform.

Keywords: data flow analysis, data flow integrity, reference monitor, security policy, dynamic enforcement

Retrieve PDF document (JISE_201502_10.pdf)