Termination in Language-based Systems
- Algis Rudys
Dan S. Wallach
- Language runtime systems are increasingly being embedded
in systems to support runtime extensibility via mobile code. Such systems
raise a number of concerns when the code running in such systems is potentially
buggy or untrusted. While sophisticated access controls have been designed
for mobile code and are shipping as part of commercial systems such as Java,
there is no support for terminating mobile code short of terminating the entire
language runtime. This paper presents a concept called ``soft termination''
which can be applied to virtually any mobile code system. Soft termination
allows mobile code threads to be safely terminated while preserving the stability
of the language runtime. In addition, function bodies can be permanently disabled,
thwarting attacks predicated on system threads eventually calling untrusted
functions. We present a formal design for soft termination and an implementation
of it for Java, built using Java bytecode rewriting, and demonstrating reasonable
performance (3-25% slowdowns on benchmarks).
- Network and Distributed Systems Security Symposium '01,
San Diego, California, February 2001, pages 175-187.
- PostScript (476 kbytes)
PDF (94 kbytes)
Dan Wallach, CS
Department, Rice University
Mon 10-Feb-2003 15:49