Equivalence-preserving corrective enforcement of security properties

摘要: Runtime monitoring is a widely used approach for the enforcement of security policies. It allows safe execution untrusted code by observing and reacting if needed to prevent violation user-defined policy. Previous studies have determined that set properties enforceable monitors greatly extended giving monitor some licence transform its target execution. In this study, we present new framework model study behaviour such monitors. order assure meaningful, bound monitor's ability restriction stating any transformation must preserve equivalence between input output. We proceed examples meaningful relations identify policies are with their use. also relate our work previous in field. Finally, investigate how an priori knowledge program's would increase power.