Security relevancy analysis on the registry of windows NT 4.0

Wenliang Du, Praerit Garg, Aditya P. Mathur

Research output: Chapter in Book/Report/Conference proceedingConference contribution

3 Scopus citations

Abstract

Many security breaches are caused by inappropriate inputs crafted by people with malicious intents. To enhance the system security, we need either to ensure that inappropriate inputs are filtered out by the program, or to ensure that only trusted people can access those inputs. In the second approach, we sure do not want to put such constraint on every input, instead, we only want to restrict the access to the security relevant inputs. The goal of this paper is to investigate how to identify which inputs are relevant to system security. We formulate the problem as an security relevancy problem, and deploy static analysis technique to identify security relevant inputs. Our approach is based on dependency analysis technique; it identifies if the behavior of any security critical action depends on certain input. If such a dependency relationship exists, we say that the input is security relevant, otherwise, we say the input is security non-relevant. This technique is applied to a security analysis project initiated by Microsoft Windows NT security group. The project is intended to identify security relevant registry keys in the Windows NT operating system. The results from this approach is proved useful to enhancing Windows NT security. Our experiences and results from this project are presented in the paper.

Original languageEnglish (US)
Title of host publicationProceedings - 15th Annual Computer Security Applications Conference, ACSAC 1999
PublisherAssociation for Computing Machinery
Pages331-338
Number of pages8
ISBN (Print)0769503462
DOIs
StatePublished - Jan 1 1999
Externally publishedYes
Event15th Annual Computer Security Applications Conference, ACSAC 1999 - Phoenix, United States
Duration: Dec 6 1999Dec 10 1999

Publication series

NameProceedings - Annual Computer Security Applications Conference, ACSAC
VolumePart F133431
ISSN (Print)1063-9527

Other

Other15th Annual Computer Security Applications Conference, ACSAC 1999
CountryUnited States
CityPhoenix
Period12/6/9912/10/99

ASJC Scopus subject areas

  • Computer Networks and Communications
  • Software
  • Safety, Risk, Reliability and Quality

Fingerprint Dive into the research topics of 'Security relevancy analysis on the registry of windows NT 4.0'. Together they form a unique fingerprint.

  • Cite this

    Du, W., Garg, P., & Mathur, A. P. (1999). Security relevancy analysis on the registry of windows NT 4.0. In Proceedings - 15th Annual Computer Security Applications Conference, ACSAC 1999 (pp. 331-338). [816044] (Proceedings - Annual Computer Security Applications Conference, ACSAC; Vol. Part F133431). Association for Computing Machinery. https://doi.org/10.1109/CSAC.1999.816044