The use of mTags for mandatory security: a case study. (19th September 2013)

• Record Type: Journal Article
• Authors: Rehman, Ahmad Saif Ur; de Oliveira, Augusto Born; Tripunitara, Mahesh; Fischmeister, Sebastian
• Is Part Of: Software, practice & experience. Volume 44:Number 12(2014)
• Page Start: 1511
• Page End: 1523
• Publication Date: 2013-09-19
• Subjects: Computer software -- Periodicals; Computer programming -- Periodicals; Computer programs -- Periodicals; 005.3
• DOI: 10.1002/spe.2222
• Languages: English
• ISSNs: 0038-0644

Abstract

<abstract abstract-type="main" id="spe2222-abs-0001"> <title>SUMMARY</title> <p id="spe2222-para-0001">mTags is an efficient mechanism that augments inter‐thread messages with lightweight metadata. We introduce and discuss a case study that we have conducted in the use of mTags for realizing a kind of mandatory security. Although mTags can be implemented for any message passing thread‐based system, we consider an implementation of it in the POSIX‐compliant QNX Neutrino, a commercial microkernel‐based system. The approach to mandatory security that we adopt is Usable Mandatory Integrity Protection, which has been proposed in recent research. We call our adaptation of Usable Mandatory Integrity Protection using mTags, <italic>μ</italic>MIP. We discuss the challenges we faced, and our design and implementation that overcomes these challenges. We discuss the performance of our implementation for well‐established benchmarks. We conclude with the observation that mTags can be useful and practical to realize mandatory security in realistic systems. Copyright © 2013 John Wiley &amp; Sons, Ltd.</p> </abstract>