CERIAS Weblogs » About: Secure Program Execution via Dynamic Information Flow Tracking

Pascal Meunier

Pascal Meunier is a research scientist at the Center for Education and Research in Information and Assurance (CERIAS) at Purdue University. He is the author of the Cassandra system, the CIRDB and PI for the ReAssure project. He also teaches secure programming and publishes a set of slides in 3 parts on the subject.

Homepage»

Author XML Feeds

Search

November 9th, 2005 by Pascal Meunier in General

Suh et al. (2004) propose a wonderful method for tracking taintedness, and denying dangerous operations. It’s elegant, easy to understand, cheap in terms of performance hit, and effective. The only problem is… it would require re-designing the hardware (CPUs) to support it.

I wish it would happen, but I’m not holding my breath. Perhaps virtual machines could help until it happens, and even make it happen?

del.icio.us »