andrea bittaumark handley petr marchenkobrad karp computer science department ucl fine-grained...
DESCRIPTION
Motivation & Problem Definition Apache Web Server network parser private key memory protectionTRANSCRIPT
![Page 1: ANDREA BITTAUMARK HANDLEY PETR MARCHENKOBRAD KARP COMPUTER SCIENCE DEPARTMENT UCL Fine-Grained Isolation…](https://reader037.vdocuments.site/reader037/viewer/2022090107/5a4d1bfa7f8b9ab0599eb514/html5/thumbnails/1.jpg)
ANDREA BITTAU MARK HANDLEY PETR MARCHENKO BRAD KARP
COMPUTER SCIENCE DEPARTMENTUCL
Fine-Grained Isolation for the Apache Web Server
![Page 2: ANDREA BITTAUMARK HANDLEY PETR MARCHENKOBRAD KARP COMPUTER SCIENCE DEPARTMENT UCL Fine-Grained Isolation…](https://reader037.vdocuments.site/reader037/viewer/2022090107/5a4d1bfa7f8b9ab0599eb514/html5/thumbnails/2.jpg)
Motivation & Problem Definition
Apache Web Server
networkparserprivate
key
![Page 3: ANDREA BITTAUMARK HANDLEY PETR MARCHENKOBRAD KARP COMPUTER SCIENCE DEPARTMENT UCL Fine-Grained Isolation…](https://reader037.vdocuments.site/reader037/viewer/2022090107/5a4d1bfa7f8b9ab0599eb514/html5/thumbnails/3.jpg)
Motivation & Problem Definition
Apache Web Server
networkparserprivate
key
memory protection
memory protection
![Page 4: ANDREA BITTAUMARK HANDLEY PETR MARCHENKOBRAD KARP COMPUTER SCIENCE DEPARTMENT UCL Fine-Grained Isolation…](https://reader037.vdocuments.site/reader037/viewer/2022090107/5a4d1bfa7f8b9ab0599eb514/html5/thumbnails/4.jpg)
Is partitioning easy?
Apache Web Server
networkparserprivate
key
memory protection
memory protection
Apache worker process requires access to222 heap and 389 global objects
![Page 5: ANDREA BITTAUMARK HANDLEY PETR MARCHENKOBRAD KARP COMPUTER SCIENCE DEPARTMENT UCL Fine-Grained Isolation…](https://reader037.vdocuments.site/reader037/viewer/2022090107/5a4d1bfa7f8b9ab0599eb514/html5/thumbnails/5.jpg)
Problem Statement
Given a function, what memory does it access?
Given memory items, which functions access them?
Given a function that “generates” sensitive data, where does it propagate?
Crowbar, our binary instrumentation tool, answers these questions
![Page 6: ANDREA BITTAUMARK HANDLEY PETR MARCHENKOBRAD KARP COMPUTER SCIENCE DEPARTMENT UCL Fine-Grained Isolation…](https://reader037.vdocuments.site/reader037/viewer/2022090107/5a4d1bfa7f8b9ab0599eb514/html5/thumbnails/6.jpg)
SSL-enabled Apache Web Server
Apache Web Server
network
private key workergen_session_key
(~200 LoC)
memory protection
memory protection