SASI Enforcement of Security Policies:
A Retrospective


Úlfar Erlingsson, Fred B. Schneider. SASI Enforcement of Security Policies: A Retrospective. Proceedings of the 1999 New Security Paradigms Workshop, (Caledon Hills, Ontario, Canada), September 22 - 24, 1999.
(compressed PostScript)

 

Abstract

SASI enforces security policies by modifying object code for a target system before that system is executed. The approach has been prototyped for two rather different machine architectures: Intel x86 and Java JVML. Details of these prototypes and some generalizations about the SASI approach are discussed.