A Secure Environment for Untrusted Helper Applications

Goldberg, I., Wagner, David, Thomas, Randi, & Brewer, E. A. (1996). A Secure Environment for Untrusted Helper Applications: Confining the Wily Hacker. Proceedings of the 6th USENIX Security Symposium.

Type

Conference paper

Intellectual base

Primary research

Year

1996

Link

https://www.usenix.org/legacy/publications/library/proceedings/sec96/full_papers/goldberg/goldberg.pdf

Cited from

computer_science, political_science

Cited by

2 citations across 2 artifacts.

Each citation links to the sentence it supports in the citing article.

Primes

• Innovation Sandbox
  • Software and security: process-level sandboxes (browser tabs, OS containers, syscall jails), language-level sandboxes (WASM, JavaScript VMs), staging environments separated from production.

    This sourceFoundational system-call-confinement (Janus) sandbox isolating untrusted code from the host.

• Sandboxing
  • The combination is the load-bearing commitment: pure containment (a vault, a quarantine) suppresses; pure exercise (production deployment) exposes; sandboxing does both at once by tightly specifying which actions the contained process may perform on the outside and which it may not.

    This sourceIntroduces a sandbox that confines an untrusted process by interposing on and restricting the system calls it may make on the outside.

Verification

This reference passed the adversarial substantiation pipeline: it was checked to exist and to support the claim it is attached to. See how references were verified.

Links previously used in the corpus

Before the registry existed this work was also linked 1 other way.

• https://www.usenix.org/conference/6th-usenix-security-symposium/secure-environment-untrusted-helper-applications ×1

Registry ID ref:c03a4f1812bd · see in the full table