Secure Self-Certified COTS

With the advent and the rising popularity of networks, Internet, intranets and distributed systems, security is becoming one of the major concerns in IT research. An increasing number of approaches have beenproposed to ensure the safety and security of programs. Among those approaches, certijied code seems to be the most promising. Unfortunately,as of today, most of the research on certijied code havefocused on simple type safety and memory safety, rather than security issues. We thereforepropose to extend this approach to the security aspects of a program. Our intention is to use such an approach as an eficient and realistic solution to the problem of malicious code detection in COTS. In this paper; we present our progress in dejning and implementing a certifying compiler that produces a secure self-certijied code that can be used to ensure both safety and security of the code. .

• Type: Conference
• Year: 2000
• Where: WETICE
• Authors: Mourad Debbabi, E. Giasson, Béchir Ktari, F. Michaud, Nadia Tawbi
• Keywords: Code, Emerging Technology, Security, Simple Type Safety, WETICE 2000