@inproceedings{4bf8bd10a8bf44e99966cb027c694a8f,
title = "Design and implementation of an extended reference monitor for trusted operating systems",
abstract = "Conventional access control schemes have supported confidentiality and integrity acknowledging the necessary organizational security policy in operating systems. However, many runtime attacks in operating systems involve behavioral semantics, indicating that attacks should be seen as a sequence of access operations. Ironically these attacks are legitimate under any access control policy. This is due to the lack of behavioral dimension in security enforcement. We propose an extended reference monitor to include this dimension. Our method is based on safety property specification on system call sequences. The reference monitor checks the trace at runtime for behavior control in Linux operating system.",
author = "Kim, {Hyung Chan} and Wook Shin and Ramakrishna, {R. S.} and Kouichi Sakurai",
year = "2006",
doi = "10.1007/11689522_22",
language = "English",
isbn = "3540330526",
series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
publisher = "Springer Verlag",
pages = "235--247",
booktitle = "Information Security Practice and Experience - Second International Conference, ISPEC 2006, Proceedings",
address = "Germany",
note = "2nd International Conference on Information Security Practice and Experience, ISPEC 2006 ; Conference date: 11-04-2006 Through 14-04-2006",
}