Úlfar Erlingsson, Fred B. Schneider. SASI Enforcement
of Security Policies: A Retrospective. Proceedings of the 1999
New Security Paradigms Workshop, (Caledon Hills, Ontario,
Canada), September 22 - 24, 1999.
(compressed PostScript)
SASI enforces security policies by modifying object code for a target system before that system is executed. The approach has been prototyped for two rather different machine architectures: Intel x86 and Java JVML. Details of these prototypes and some generalizations about the SASI approach are discussed.