Citations

• Vassilis Prevelakis and Diomidis Spinellis. Sandboxing applications. In USENIX 2001 Technical Conference Proceedings: FreeNIX Track, pages 119–126, Berkeley, CA, June 2001. USENIX Association.

• Kazuhiko Kato and Yoshihiro Oyama. Softwarepot: An encapsulated transferable file system for secure software circulation. In Software Security — Theories and Systems: Proceedings of the International Symposium on Software Security, pages 112–132. Springer-Verlag, November 2002. Lecture Notes in Computer Science; Vol 2609.

• Sumit Kumar, Rajesh Rajamani, and Abhishek Saxena. Comminst: Instrumenting process communication, 2002. Available online http://www.cs.wisc.edu/ raj/comminst/comminstpaper.doc.

• Yoshihiro Oyama, Katsunori Kanda, and Kazuhiko Kato. Design and implementation of secure software execution system SoftwarePot. Computer Software, 19(6):2–12, November 2002. In Japanese.

• W. Morein, A. Stavrou, D. Cook, A. Keromytis, V. Misra, and D. Rubenstein. Using graphic turing tests to counter automated DDoS attacks against web servers. In Proceedings of the 10th ACM International Conference on Computer and Communications Security (CCS), pages 8–19, October 2003.

• Stelios Sidiroglou and Angelos D. Keromytis. Countering network worms through automatic patch generation. Technical Report CUCS-029-03, Computer Science Dept. University of Columbia, 2003.

• Stephen Boyd and Angelos Keromytis. SQLrand: Preventing SQL injection attacks. In Markus Jakobsson, Moti Yung, and Jianying Zhou, editors, Applied Cryptography and Network Security, Second International Conference, ACNS 2004, Yellow Mountain, China, June 8-11, 2004, Proceedings, volume 3089 of Lecture Notes in Computer Science. Springer, 2004.

• Lap Chung Lam and Tzi cker Chiueh. Automatic extraction of accurate application-specific sandboxing policy. In International Symposium on Recent Advances in Intrusion Detection RAID 2004, pages 1–20. Eurécom Institute, Springer-Verlag, September 2004. Lecture Notes in Computer Science 3224. (doi:10.1007/b100714)

• Yves Younan, Wouter Joosen, and Frank Piessens. Code injection in C and C++ : A survey of vulnerabilities and countermeasures. Report CW 386, Katholieke Universiteit Leuven, Department of Computer Science, Heberlee, Belgium, July 2004. Available online http://fort-knox.org/CW386.pdf.

• G.S. Kc and A.D. Keromytis. e-NeXSh: Achieving an effectively non-executable stack and heap via system-call policing. In Proceedings — Annual Computer Security Applications Conference, ACSAC, volume 2005, pages 286–300, 2005. (doi:10.1109/CSAC.2005.22)

• L.-C. Lam and T.-C. Chiueh. Automatic extraction of accurate application-specific sandboxing policy. In IEEE Military Communications Conference MILCOM, volume 2005, 2005. (doi:10.1109/MILCOM.2005.1605766)

• Y. Oyama, K. Onoue, and A. Yonezawa. Speculative security checks in sandboxing systems. In Proceedings - 19th IEEE International Parallel and Distributed Processing Symposium, IPDPS 2005, volume 2005, pages 111–116, 2005. (doi:10.1109/IPDPS.2005.408)

• Yves Younan, Wouter Joosen, and Frank Piessens. A methodology for designing countermeasures against current and future code injection attacks. In Proceedings of the Third IEEE International Information Assurance Workshop 2005 (IWIA2005). IEEE, March 2005.

• T. Khatiwala, R. Swaminathan, and V.N. Venkatakrishnan. Data sandboxing: A technique for enforcing confidentiality policies. In ACSAC: Annual Computer Security Applications Conference, pages 223–232, 2006. (doi:10.1109/ACSAC.2006.22)

• W. Li, L.-C. Lam, and T.-C. Chiueh. How to automatically and accurately sandbox Microsoft IIS. In Proceedings - Annual Computer Security Applications Conference, ACSAC, pages 213–222, 2006. (doi:10.1109/ACSAC.2006.31)

• Helmut Salmen. Method and apparatus for restricted run-time environment with dynamic user context. United States Patent 7,069,275, 2006.

• S. Sidiroglou and A.D. Keromytis. Execution transactions for defending against software failures: Use and evaluation. International Journal of Information Security, 5(2):77–91, 2006. (doi:10.1007/s10207-006-0083-6)

• B. Krishnamurthy, D. Malandrino, and C.E. Wills. Measuring privacy loss and the impact of privacy protection in web browsing. In ACM International Conference Proceeding Series, volume 229, pages 52–63, 2007. (doi:10.1145/1280680.1280688)

• W. Li, L.-C. Lam, and T.-C. Chiueh. Accurate application-specific sandboxing for Win32/Intel binaries. In IAS 2007: 3rd Internationl Symposium on Information Assurance and Security, pages 375–380, 2007. (doi:10.1109/IAS.2007.86)

• W. Sun, R. Sekar, Z. Liang, and V.N. Venkatakrishnan. Expanding malware defense by securing software installations. In DIMVA 2008: 5th International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment, pages 164–185, July 2008. Lecture Notes in Computer Science 5137. (doi:10.1007/978-3-540-70542-0_9)

• Y. Wen and H.-M. Wang. Isolated execution model based on local virtualization technology. Jisuanji Xuebao/Chinese Journal of Computers, 31(10):1768–1779, 2008.

• Z. Liang, W. Sun, V.N. Venkatakrishnan, and R. Sekar. Alcatraz: An isolated environment for experimenting with untrusted software. ACM Transactions on Information and System Security, 12(3), 2009. (doi:10.1145/1455526.1455527)

Unless otherwise expressly stated, all original material on this page created by Diomidis Spinellis is licensed under a Creative Commons Attribution-Share Alike 3.0 Greece License.