PRECIP: Towards Practical and Retrofittable Confidential Information Protection.

摘要: A grand challenge in information protection is how to preserve the confidentiality of sensitive under spyware surveillance. This problem has not been well addressed by existing access-control mechanisms which cannot prevent already a system from monitoring an authorized party’s interactions with data. Our answer this PRECIP, new security policy model takes first step towards practical and retrofittable confidential protection. designed offer efficient online for commercial applications operating systems. It intends be retrofitted these systems without modifying their code. To end, PRECIP addresses several issues critical containing surveillance, however are handled previous work access control information-flow security. Examples include models human input devices such as keyboard whose sensitivity level must dynamically determined, other shared resources clipboard screen accessed different processes, multitasked processes on public data concurrently. We applied Windows XP protect editing or viewing documents browsing websites. demonstrate that our implementation works effectively against wide spectrum spyware, including keyloggers, grabbers file stealers. also evaluated overheads technique, shown very small.