Security Assertion Checking & Enforcement Using Monitors

The goal of this project is to develop a new set of procedures and tools for testing the security of running software systems using a technique based on the concept of monitor. Monitors are systems which observe and analyze the behavior of a second system. The monitor will be designed as an external system that uses software “hooks” in the existing system to insert and extract information. This framework will allow the checking of assertions and the reporting of exceptions. Once a monitor framework is in place, work may progress by identifying the points in the systems that could be exploited for malicious intent thus allowing the implementation of safeguards. The open-source LINUX kernel will be used as a basis for this research. The resulting monitor framework can contribute to the accountability of users, assurance of security measures and the continuous protection of secure systems for users.

Faculty Supervisor:

Dr. Issa Traore

Student:

Alexander Hoole

Partner:

Microdev Engineering Corp.

Discipline:

Engineering

Sector:

Information and communications technologies

University:

University of Victoria