Miscellaneous Topics in Security

Data lifetime

• Device buffers
• Application buffers and swap space
• Compiler removing dead code

Reference : Understanding Data Lifetime via Whole System Simulation

Architectural Extensions for Security (e.g., Intel SGX)

Reference : Intel SGX Explained

Capabilities and ACLs

• capabilities
  • file descriptors, secret keys/passwords, document URL, fingerprints
    • easy to share
    • opaque
    • hard to review and revoke
• access-control lists
  • user-group-other r/w/x for files/devices, admission/membership list, friend list on social media, etc.
  • easier to review and revoke

Reference : OS Lecture 36 : Protection and Security

Failure Atomicity and Data-leak Bugs

Reference : OS Lecture 34 : Crash Recovery and Logging

Equivalence Checking and Superoptimization

References:

1. Translation Validator Demo

2. Research Talk

3. Research paper