Title :
A enhancement technology about system security based on dynamic information flow tracking
Author :
Ao Shan ; Shuangzhou, Guo
Author_Institution :
Comput. Sci. & Technol. Sch., Henan Polytech. Univ., Jiaozuo, China
Abstract :
Based on information security technology of speculation implementation hardware, we design and implement the SHIFT(Speculative Hardware based Information Flow Tracking) system to enhance software security in cloud computing platform. SHIFT system uses that processor support delay exceptions, design and implement efficient dynamic information flow tracking technology. The system can detect low-level attacks such as buffer overflow attack, while effective defense other high-level semantic attacks based on SQL injection attacks (SQL Injection) and cross-directory traversal attacks (Directory Traversal). The system have the best performance in all practical system based on dynamic information flow tracking technology. In practical testing based on Apache WebServer, SHIFT system have only 1% performance loss.
Keywords :
SQL; cloud computing; industrial property; security of data; Apache Web server; SHIFT system; SQL injection attacks; cloud computing platform; cross-directory traversal attacks; directory traversal; dynamic information flow tracking; information security; low-level attack detection; processor support delay exceptions; software security; speculative hardware based information flow tracking system; system security enhancement technology; Delay; Hardware; Instruments; Registers; Security; Software; Testing; dependability; dynamic information flow tracking; software security; speculation implement;
Conference_Titel :
Artificial Intelligence, Management Science and Electronic Commerce (AIMSEC), 2011 2nd International Conference on
Conference_Location :
Deng Leng
Print_ISBN :
978-1-4577-0535-9
DOI :
10.1109/AIMSEC.2011.6011436