Isolated program execution: an application transparent approach for executing untrusted programs

摘要: We present a new approach for safe execution of untrusted programs by isolating their effects from the rest system. Isolation is achieved intercepting file operations made processes, and redirecting any change to "modification cache" that invisible other processes in File read performed process are also correspondingly modified, so has consistent view system state incorporates contents as well modification cache. On termination process, its user presented with concise summary files modified process. Additionally, can inspect these using various software utilities (e.g., helper applications multimedia files) determine if modifications acceptable. The then option commit modifications, or simply discard them. Essentially, our provides "play" "rewind" buttons running software. Key benefits it requires no changes (to be isolated) underlying operating system; cannot subverted malicious programs; achieves acceptable runtime overheads. describe prototype implementation this Linux called Alcatraz discuss performance effectiveness.