WO2008114560A1 - コンピュータ、動作ルール適用方法、オペレーティングシステム - Google Patents

コンピュータ、動作ルール適用方法、オペレーティングシステム Download PDF

Info

Publication number
WO2008114560A1
WO2008114560A1 PCT/JP2008/052722 JP2008052722W WO2008114560A1 WO 2008114560 A1 WO2008114560 A1 WO 2008114560A1 JP 2008052722 W JP2008052722 W JP 2008052722W WO 2008114560 A1 WO2008114560 A1 WO 2008114560A1
Authority
WO
WIPO (PCT)
Prior art keywords
operating system
program
system call
application
operation rule
Prior art date
Application number
PCT/JP2008/052722
Other languages
English (en)
French (fr)
Inventor
Naoshi Higuchi
Original Assignee
Nec Corporation
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Nec Corporation filed Critical Nec Corporation
Priority to EP08711546A priority Critical patent/EP2113859A4/en
Priority to JP2009505102A priority patent/JP5131563B2/ja
Priority to US12/526,345 priority patent/US20100325077A1/en
Publication of WO2008114560A1 publication Critical patent/WO2008114560A1/ja

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F12/00—Accessing, addressing or allocating within memory systems or architectures
    • G06F12/14—Protection against unauthorised use of memory or access to memory
    • G06F12/1458—Protection against unauthorised use of memory or access to memory by checking the subject access rights
    • G06F12/1483—Protection against unauthorised use of memory or access to memory by checking the subject access rights using an access-table, e.g. matrix or list
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/52—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
    • G06F21/53—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow by executing in a restricted environment, e.g. sandbox or secure virtual machine
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/46—Multiprogramming arrangements
    • G06F9/468—Specific access rights for resources, e.g. using capability register
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/46—Multiprogramming arrangements
    • G06F9/54—Interprogram communication
    • G06F9/545—Interprogram communication where tasks reside in different layers, e.g. user- and kernel-space
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2209/00—Indexing scheme relating to G06F9/00
    • G06F2209/54—Indexing scheme relating to G06F9/54
    • G06F2209/542—Intercept

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • Computer Security & Cryptography (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Mathematical Physics (AREA)
  • Computer Hardware Design (AREA)
  • Stored Programmes (AREA)
  • Executing Machine-Instructions (AREA)

Abstract

課題　ライブラリプログラムを含む複数プログラムからなるアプリケーションにおいて、アプリケーションが呼び出すシステムコールの処理の許否を決定できるルールを適用可能なオペレーティングシステムを提供する。 解決手段　プログラムをロードしたメモリ上のアドレスをプログラムと対応させてアドレス範囲セットとして記憶し、アプリケーションの起動処理において、各プログラムをメモリ上にロードし、アドレス範囲セットをアドレス範囲セット記憶手段に記憶させ、アプリケーションからのシステムコールの呼び出しを受け、各種の処理を実行し、アプリケーションを構成するプログラムによるシステムコールの利用の可否を記述する動作ルールを記憶し、システムコール処理手段によって呼び出された処理を実行するか否かを、システムコールの呼び出し元のプログラムに対応した動作ルールに基づいて決定する。
PCT/JP2008/052722 2007-02-21 2008-02-19 コンピュータ、動作ルール適用方法、オペレーティングシステム WO2008114560A1 (ja)

Priority Applications (3)

Application Number Priority Date Filing Date Title
EP08711546A EP2113859A4 (en) 2007-02-21 2008-02-19 COMPUTER, OPERATING RULES APPLICATION METHOD AND OPERATING SYSTEM
JP2009505102A JP5131563B2 (ja) 2007-02-21 2008-02-19 コンピュータ、動作ルール適用方法、オペレーティングシステム
US12/526,345 US20100325077A1 (en) 2007-02-21 2008-02-19 Computer, operation rule application method and operating system

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
JP2007-040746 2007-02-21
JP2007040746 2007-02-21

Publications (1)

Publication Number Publication Date
WO2008114560A1 true WO2008114560A1 (ja) 2008-09-25

Family

ID=39765674

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/JP2008/052722 WO2008114560A1 (ja) 2007-02-21 2008-02-19 コンピュータ、動作ルール適用方法、オペレーティングシステム

Country Status (4)

Country Link
US (1) US20100325077A1 (ja)
EP (1) EP2113859A4 (ja)
JP (1) JP5131563B2 (ja)
WO (1) WO2008114560A1 (ja)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2011128683A (ja) * 2009-12-15 2011-06-30 Fujitsu Ltd 情報処理装置、コマンド判定プログラム、およびコマンド判定方法
JP5954666B2 (ja) * 2010-12-08 2016-07-20 パナソニックＩｐマネジメント株式会社 情報処理装置、及び、情報処理方法

Families Citing this family (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP4861539B1 (ja) * 2010-06-02 2012-01-25 パナソニック株式会社 通信制御装置およびパケットフィルタリング方法
US9424420B2 (en) * 2013-08-02 2016-08-23 Red Hat, Inc. Restricting application binary interfaces
US10613900B2 (en) * 2013-10-05 2020-04-07 Waratek Limited Multi-tenant monitoring
CN104573504B (zh) * 2014-12-24 2018-05-25 百度在线网络技术（北京）有限公司 一种用于在iOS相关系统中运行应用的方法和装置
US11663337B2 (en) * 2018-07-20 2023-05-30 George Mason University Methods and systems for system call reduction
US11409864B1 (en) * 2021-06-07 2022-08-09 Snowflake Inc. Tracing supervisor for UDFs in a database system

Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2004526237A (ja) * 2001-02-06 2004-08-26 インフィネオン テクノロジーズ アクチェンゲゼルシャフト データキャリアのためのマイクロプロセッサ回路、および、メモリ内に格納されたデータへのアクセスを組織化するための方法
JP2004303243A (ja) 2003-03-28 2004-10-28 Hewlett-Packard Development Co Lp 高信頼性コンピューティングシステムにおけるノードのセキュリティ属性
WO2005029328A1 (ja) * 2003-09-18 2005-03-31 Denki Hompo Ltd. オペレーティングシステム、及びそれを記録した記録媒体
WO2005121974A1 (ja) * 2004-06-11 2005-12-22 Ntt Docomo, Inc. 移動通信端末及びデータアクセス制御方法
JP3763142B2 (ja) 2002-01-30 2006-04-05 ソニー株式会社 特権命令実行制御装置、特権命令実行制御方法、および特権命令実行制御プログラム
WO2006126686A1 (ja) * 2005-05-26 2006-11-30 Matsushita Electric Industrial Co., Ltd. データ処理装置
JP2007040746A (ja) 2005-08-01 2007-02-15 Fujifilm Corp 全反射減衰を利用した分析における反応速度係数の測定方法

Family Cites Families (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2003515218A (ja) * 1999-11-14 2003-04-22 クリックネット ソフトウエア，インク． 呼び出しアドレスの確認による安全な機能実行の方法
AU7623600A (en) * 1999-11-16 2001-05-30 Intel Corporation A method of providing secure linkage of program modules
AU2001278328A1 (en) * 2000-07-26 2002-02-05 David Dickenson Distributive access controller
JP4007873B2 (ja) * 2002-07-09 2007-11-14 富士通株式会社 データ保護プログラムおよびデータ保護方法
US7165018B2 (en) * 2002-11-22 2007-01-16 Texas Instruments Incorporated Address range comparator for detection of multi size memory accesses with data matching qualification and full or partial overlap
US7124255B2 (en) * 2003-06-30 2006-10-17 Microsoft Corporation Message based inter-process for high volume data
EP1507185A1 (fr) * 2003-08-11 2005-02-16 Axalto S.A. Méthode et dispositif de protection contre l'accès non-autorisé à une routine sensible
US7716495B2 (en) * 2003-12-31 2010-05-11 Microsoft Corporation Protection against runtime function attacks
US7392169B2 (en) * 2004-10-21 2008-06-24 International Business Machines Corporation Method, system and program product for defining and recording minimum and maximum event counts of a simulation utilizing a high level language
US20060149845A1 (en) * 2004-12-30 2006-07-06 Xinnia Technology, Llc Managed quality of service for users and applications over shared networks
JP4241680B2 (ja) * 2005-07-05 2009-03-18 ブラザー工業株式会社 通信システム、情報処理装置、及びプログラム

Patent Citations (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2004526237A (ja) * 2001-02-06 2004-08-26 インフィネオン テクノロジーズ アクチェンゲゼルシャフト データキャリアのためのマイクロプロセッサ回路、および、メモリ内に格納されたデータへのアクセスを組織化するための方法
JP3763142B2 (ja) 2002-01-30 2006-04-05 ソニー株式会社 特権命令実行制御装置、特権命令実行制御方法、および特権命令実行制御プログラム
JP2004303243A (ja) 2003-03-28 2004-10-28 Hewlett-Packard Development Co Lp 高信頼性コンピューティングシステムにおけるノードのセキュリティ属性
WO2005029328A1 (ja) * 2003-09-18 2005-03-31 Denki Hompo Ltd. オペレーティングシステム、及びそれを記録した記録媒体
WO2005121974A1 (ja) * 2004-06-11 2005-12-22 Ntt Docomo, Inc. 移動通信端末及びデータアクセス制御方法
WO2006126686A1 (ja) * 2005-05-26 2006-11-30 Matsushita Electric Industrial Co., Ltd. データ処理装置
JP2007040746A (ja) 2005-08-01 2007-02-15 Fujifilm Corp 全反射減衰を利用した分析における反応速度係数の測定方法

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
PETER LOSCOCCO; STEPHEN SMALLEY: "Integrating Flexible Support for Security Policies into the Linux Operating System", PROCEEDINGS OF THE FREENIX TRACK OF THE 2001 USENIX ANNUAL TECHNICAL CONFERENCE, 2001

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2011128683A (ja) * 2009-12-15 2011-06-30 Fujitsu Ltd 情報処理装置、コマンド判定プログラム、およびコマンド判定方法
US8578158B2 (en) 2009-12-15 2013-11-05 Fujitsu Limited Information processing apparatus, computer-readable recording medium configured to store command execution determination program, and command execution determination method
JP5954666B2 (ja) * 2010-12-08 2016-07-20 パナソニックＩｐマネジメント株式会社 情報処理装置、及び、情報処理方法

Also Published As

Publication number Publication date
EP2113859A1 (en) 2009-11-04
US20100325077A1 (en) 2010-12-23
EP2113859A4 (en) 2010-04-14
JPWO2008114560A1 (ja) 2010-07-01
JP5131563B2 (ja) 2013-01-30

Similar Documents

Publication Publication Date Title
WO2008114560A1 (ja) コンピュータ、動作ルール適用方法、オペレーティングシステム
WO2010048492A3 (en) Methods and systems for providing a modifiable machine base image with a personalized desktop environment in a combined computing environment
WO2007081660A3 (en) Method and apparatus for virtual load regions in storage system controllers
WO2009085118A3 (en) System and method for architecture-adaptable automatic parallelization of computing code
WO2010043706A3 (fr) Procede d'execution deterministe et de synchronisation d'un systeme de traitement de l'information comportant plusieurs coeurs de traitement executant des taches systemes
WO2012103827A3 (zh) 一种容器状态的保存和恢复的方法及装置
WO2006006084A8 (en) Establishing command order in an out of order dma command queue
RU2010149255A (ru) Экземпляры планировщика в процессе
WO2007143278A3 (en) Apparatus and method for processing an instruction matrix specifying parallel and dependent operations
WO2009023580A3 (en) Automated application modeling for application virtualization
GB2469983B (en) Methods, systems, and computer program products for taking a snapshot of installed software on a data processing system as part of a software update process
TW200625101A (en) Backup/restore system and method thereof
WO2008003930A3 (en) Techniques for program execution
WO2011068975A3 (en) Dynamic code insertion and removal for static analysis based sandboxes
WO2013186722A4 (en) Selectively controlling instruction execution in transactional processing
WO2011063396A3 (en) Stream-based software application delivery and launching system
MX2010002671A (es) Sistema y metodo de procesamiento.
WO2011088414A3 (en) Systems and methods for per-action compiling in contact handling systems
WO2006110921A3 (en) System and method for scanning memory for pestware offset signatures
EP4220399A3 (en) Dynamic reconfiguration of applications on a multi-processor embedded system
WO2008003536A3 (en) Method, system and computer program for determining the processing order of a plurality of events
WO2011086473A3 (en) Hardware virtualization for media processing
WO2012107199A3 (de) Anpassung der dynamik zumindest eines roboters
WO2011127865A3 (zh) 内存转储处理方法和装置及内存转储系统
WO2013186430A3 (en) Method, apparatus, and computer program product for fast context switching of application specific processors

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 08711546

Country of ref document: EP

Kind code of ref document: A1

WWE Wipo information: entry into national phase

Ref document number: 12526345

Country of ref document: US

ENP Entry into the national phase

Ref document number: 2009505102

Country of ref document: JP

Kind code of ref document: A

NENP Non-entry into the national phase

Ref country code: DE

WWE Wipo information: entry into national phase

Ref document number: 2008711546

Country of ref document: EP