Quarantining Untrusted Entities: Dynamic Sandboxing Using LEAP

Abstract

Jails, Sandboxes and other isolation mechanisms limit the damage from untrusted programs by reducing a process's privileges to the minimum. Sandboxing is designed to thwart such threats as (1) a program created by an attacker or (2) an input crafted to exploit a security vulnerability in a program. Examples of the later include input containing interpreted code or machine language to be injected via a buffer overflow.Traditionally, sandboxes are created by an invoking process. This is effective for (1) but only partially so for (2). For example, when a file is downloaded by a browser or processed as a mail attachment, the invoking process can sandbox it. However, sandboxing protections can be circumvented when the file is copied outside the sandbox. The problem is that traditional sandboxes do not provide complete mediation.We introduce dynamic sandboxes, and show how even when data is saved and/or copied, sandboxing protections are not lost. In addition, and in contrast to traditional sandbox implementations, dynamic sandboxes are implemented using general purpose access controls. Not only does this provide a more flexible sandbox mechanism, and enable complete mediation, but these same primitives can be used to build other (non-sandbox) authorization policies.

Magnesium Object Manager Sandbox, A More Effective Sandbox Method for Windows 7

“…Sandboxes such as [27] and [29] generate a model to represent the sequence of system calls a program makes, and then if the program deviates from the model it prevents the action. Sandboxes such as [16], [28], and [43] extend this approach to not only look at the system calls a program makes, but to look at the effect they produce, such as the actions they take on files and registry keys; similarly, [38] extends this approach to dynamically sandbox programs based on the data, and source of the data, they access. Other research efforts go as far as running device drivers in a virtualized environment to improve system security and reliability [49].…”

Detection and Classification of Non-self Based on System Call Related to Security

“…Sandboxing can be used to improve security of file access [10], analyze malicious codes [11], make sure the data written with no sensitive information [12], etc. Many studies have improved the traditional sandbox toward dissimilar emphases: sandbox executing speculative security checks [13], sandbox with a dynamic policy [14], dynamic sandbox quarantining untrusted entities [15], etc.…”