Taint-Enhanced Policy Enforcement: A Practical Approach to Defeat a Wide Range of Attacks
By Wei Xu, Sandeep Bhatkar, R. Sekar. USENIX Security Symposium, 2006
409 citations recorded by the source corpus.
View Paper: https://www.semanticscholar.org/paper/e7ef4de4c4c87bdb37712aab566c2dbc4dca07bf
How researchers see this paper
The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.
- Lucas Davi
- P. Akritidis
- Christopher Krügel
- Sadegh M. Milajerdi
- Ahmad-Reza Sadeghi
- R. Sekar
- Engin Kirda
- Giovanni Vigna
Citations in the corpus
- Context-Sensitive Fencing: Securing Speculative Execution via Microcode Customization (2019, background): “Multiple hardware information flow tracking techniques have been described at various levels of the hardware [15, 76, 69, 22, 17, 74, 25, 16] as a detection mechanism to circumvent code injection [81], cross-site scripting attacks [25, 77], buffer overflows [25, 81], and SQL injection [53, 37, 38, 8”
- Cross Site Scripting Prevention with Dynamic Data Tainting and Static Analysis (2007, background): “Only if the first character of the cookie is an ’a’, a value is assigned to the first element of the array on Line 3.”
- SLEUTH: Real-time Attack Scenario Reconstruction from COTS Audit Data (2018, background): “, fine-grained taint tags [42, 58], if they are available.”
- LIFT: A Low-Overhead Practical Information Flow Tracking System for Detecting Security Attacks (2006, methodology): “Information flow tracking systems can be implemented in three different ways, including language-based approaches [18, 19, 24, 31, 32], software-only approaches either in binary level [11, 14, 34] or in source level [42], or hardware extensions [17, 36, 39].”
- ROPdefender: a detection tool to defend against return-oriented programming attacks (2011, background): “, [30, 44]) or based on binary instrumentation (wee, e.”
- Preventing Memory Error Exploits with WIT (2008, methodology): “This technique was first described in [44].”
- Dytan: a generic dynamic taint analysis framework (2007, background): “Due to the increased popularity of dynamic tainting, there have been a few recent attempts at providing a generalized tainting infrastructure [10, 25].”