Raksha: a flexible information flow architecture for software security

By Michael Dalton, Hari Kannan, Christos Kozyrakis. International Symposium on Computer Architecture, 2007

352 citations recorded by the source corpus.

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

Context-Sensitive Fencing: Securing Speculative Execution via Microcode Customization (2019, background): “Multiple hardware information flow tracking techniques have been described at various levels of the hardware [15, 76, 69, 22, 17, 74, 25, 16] as a detection mechanism to circumvent code injection [81], cross-site scripting attacks [25, 77], buffer overflows [25, 81], and SQL injection [53, 37, 38, 8”
Merlin: specification inference for explicit information flow problems (2009, background): “The growing importance of explicit information flow is evidences by the abundance of analysis tools for information flow tracking and violation detection at the level of the language, runtime, operating system, and hardware [2, 3, 7, 9–12, 16, 18, 19, 22, 27, 29, 33, 36].”
Architecture support for disciplined approximate programming (2012, background): “Truffle resembles architectures that incorporate information flow tracking for security [7, 24, 25].”
All You Ever Wanted to Know about Dynamic Taint Analysis and Forward Symbolic Execution (but Might Have Been Afraid to Ask) (2010, positive): “Due to the high overhead of binary instrumentation techniques, more efficient compiler-based [41, 63] and hardware-based [24, 25, 58, 59] approaches were later proposed.”