[llvm-commits] CVS: llvm-www/safecode/menagerie/attacks.html footer.incl index.html memsafety.html os.html other.html sidebar.incl

John Criswell criswell at cs.uiuc.edu
Wed Jun 9 21:15:57 PDT 2010



Changes in directory llvm-www/safecode/menagerie:

attacks.html added (r1.1)
footer.incl added (r1.1)
index.html added (r1.1)
memsafety.html added (r1.1)
os.html added (r1.1)
other.html added (r1.1)
sidebar.incl added (r1.1)
---
Log message:

Beginning of memory safety menagerie site.


---
Diffs of the changes:  (+699 -0)

 attacks.html   |  128 +++++++++++++++++++++++++++++++++++++++++++
 footer.incl    |   20 ++++++
 index.html     |  104 +++++++++++++++++++++++++++++++++++
 memsafety.html |  169 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 os.html        |  137 ++++++++++++++++++++++++++++++++++++++++++++++
 other.html     |  122 +++++++++++++++++++++++++++++++++++++++++
 sidebar.incl   |   19 ++++++
 7 files changed, 699 insertions(+)


Index: llvm-www/safecode/menagerie/attacks.html
diff -c /dev/null llvm-www/safecode/menagerie/attacks.html:1.1
*** /dev/null	Wed Jun  9 23:15:38 2010
--- llvm-www/safecode/menagerie/attacks.html	Wed Jun  9 23:15:27 2010
***************
*** 0 ****
--- 1,128 ----
+ <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+ 
+ <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+ 
+ <head>
+ 
+ <title>Memory Safety Menagerie</title>
+ 
+ <meta http-equiv="content-type" content="application/xhtml+xml; charset=UTF-8" />
+ <meta name="author" content="Erwin Aligam - styleshout.com" />
+ <meta name="description" content="Site Description Here" />
+ <meta name="keywords" content="keywords, here" />
+ <meta name="robots" content="index, follow, noarchive" />
+ <meta name="googlebot" content="noarchive" />
+ 
+ <link rel="stylesheet" type="text/css" media="screen" href="images/Underground.css" />
+ 
+ </head>
+ 
+ <body>
+ <!-- wrap starts here -->
+ <div id="wrap">
+ 
+ 		<!-- header -->
+ 		<div id="header">			
+ 					
+ 			<!-- <span id="slogan"> your site slogan here...</span> -->
+ 			
+ 			<!-- tabs -->
+ 			<ul>
+ 				<li id="current"><a href="index.html"><span>Home</span></a></li>
+ 				<li><a href="index.html"><span>Archives</span></a></li>
+ 				<li><a href="index.html"><span>Downloads</span></a></li>
+ 				<li><a href="index.html"><span>Services</span></a></li>
+ 				<li><a href="index.html"><span>Support</span></a></li>
+ 				<li><a href="index.html"><span>About</span></a></li>			
+ 			</ul>
+ 											
+ 		</div>
+ 		
+ 		<div id="header-logo">			
+ 			
+ 			<div id="logo">Memory Safety <span class="red">Menagerie</span></div>		
+ 			
+ <!-- 
+ 			<form method="post" class="search" action="#">
+ 				<p><input name="search_query" class="textbox" type="text" />
+   				<input name="search" class="searchbutton" value="Search" type="submit" /></p>
+ 			</form>
+ -->
+ 						
+ 		</div>
+ 		
+        	<div id="main">
+ 			
+ 			<a name="intro"></a>
+ 			<h1>Introduction</h1>
+ 
+       <p>
+       Understand attacks that exploit the lack of memory safety in programs is
+       vital to understanding the different types of memory safety as well as
+       the tradeoffs between enforcing one kind of memory safety over another.
+       Not all memory safety techniques are equally safe.
+       </p>
+ 
+       <p>
+       Below are papers that describe how attacks exploit memory safety errors
+       for fun and profit.  They're good to read; just don't make a career out
+       of using them.
+       </p>
+ 
+ 			<a name="Papers"></a>
+ 			<h1>Memory Safety Exploit Papers</h1>
+ 
+ 				<ul>
+         <li><a href="http://llvm.org/pubs/2009-08-12-UsenixSecurity-SafeSVAOS.html">
+         <b>
+         Memory Safety for Low-Level Software/Hardware Interactions
+         </b></a>
+         <br>
+         John Criswell, Nicolas Geoffray, and Vikram Adve
+         <br>
+         <i>Proceedings of the Eighteenth USENIX Security Symposium</i>,
+         Montreal, Canada, August 2009.
+         </li>
+ 
+         <br>
+ 
+         <li><a href="http://llvm.org/pubs/2007-SOSP-SVA.html">
+         <b>
+         Secure Virtual Architecture: A Safe Execution Environment for Commodity
+         Operating Systems</b></a>
+         <br>
+         John Criswell, Andrew Lenharth, Dinakar Dhurjati, and Vikram Adve
+         <br>
+         <i>Proceedings of the Twenty First ACM Symposium on Operating Systems
+         Principles (SOSP '07)</i>, Stevenson, WA, October 2007.
+         <br>
+         <b> <font color="#FF00FF">
+         Received an SOSP 2007 Audience Choice Award.
+         </font></b>
+         </li>
+ 
+         <br>
+ 
+         <li>
+         <a href="http://llvm.org/pubs/2006-06-18-WIOSCA-LLVAOS.html">
+         <b>
+         A Virtual Instruction Set
+         Interface for Operating System Kernels</b></a>
+         <br>
+         John Criswell, Brent Monroe, and Vikram Adve.<br><i>
+         Workshop on the Interaction between Operating Systems and Computer
+         Architecture (WIOSCA '06)</i>, Boston, Massachusetts, 2006.<br></li>
+         </ul>
+         </li>
+ 		</div>
+ 
+     <!--#include virtual="sidebar.incl" -->
+ 
+ <!-- wrap ends here -->
+ </div>
+ 		
+ <!-- footer starts here -->
+ <!--#include virtual="footer.incl" -->
+ 
+ </body>
+ </html>


Index: llvm-www/safecode/menagerie/footer.incl
diff -c /dev/null llvm-www/safecode/menagerie/footer.incl:1.1
*** /dev/null	Wed Jun  9 23:15:54 2010
--- llvm-www/safecode/menagerie/footer.incl	Wed Jun  9 23:15:27 2010
***************
*** 0 ****
--- 1,20 ----
+ <!-- footer starts here -->
+ <div class="footer">
+ 	
+ 		<p>	
+ 		    © 2010 University of Illinois
+ 
+                 
+ 
+ 	    	<a href="http://www.bluewebtemplates.com/" title="Website Templates">website templates</a> by <a href="http://www.styleshout.com/">styleshout</a>
+ 
+ 		          
+ 		    <a href="index.html">Home</a> |
+    	        <a href="index.html">Site Map</a> |
+ 		    <a href="index.html">RSS Feed</a> |
+             <a href="http://validator.w3.org/check/referer">XHTML</a> |
+    	        <a href="http://jigsaw.w3.org/css-validator/check/referer">CSS</a>
+ 		</p>
+ 		
+ </div>	
+ 


Index: llvm-www/safecode/menagerie/index.html
diff -c /dev/null llvm-www/safecode/menagerie/index.html:1.1
*** /dev/null	Wed Jun  9 23:15:57 2010
--- llvm-www/safecode/menagerie/index.html	Wed Jun  9 23:15:28 2010
***************
*** 0 ****
--- 1,104 ----
+ <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+ 
+ <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+ 
+ <head>
+ 
+ <title>Memory Safety Menagerie</title>
+ 
+ <meta http-equiv="content-type" content="application/xhtml+xml; charset=UTF-8" />
+ <meta name="author" content="Erwin Aligam - styleshout.com" />
+ <meta name="description" content="Site Description Here" />
+ <meta name="keywords" content="keywords, here" />
+ <meta name="robots" content="index, follow, noarchive" />
+ <meta name="googlebot" content="noarchive" />
+ 
+ <link rel="stylesheet" type="text/css" media="screen" href="images/Underground.css" />
+ 
+ </head>
+ 
+ <body>
+ <!-- wrap starts here -->
+ <div id="wrap">
+ 
+ 		<!-- header -->
+ 		<div id="header">			
+ 					
+ 			<!-- <span id="slogan"> your site slogan here...</span> -->
+ 			
+ 			<!-- tabs -->
+ 			<ul>
+ 				<li id="current"><a href="index.html"><span>Home</span></a></li>
+ 				<li><a href="memsafety.html"><span>Memory Safety</span></a></li>
+ 				<li><a href="os.html"><span>OS Memory Safety</span></a></li>
+ 				<li><a href="related.html"><span>Services</span></a></li>
+ 				<li><a href="index.html"><span>Support</span></a></li>
+ 				<li><a href="index.html"><span>About</span></a></li>			
+ 			</ul>
+ 											
+ 		</div>
+ 		
+ 		<div id="header-logo">			
+ 			
+ 			<div id="logo">Memory Safety <span class="red">Menagerie</span></div>		
+ 			
+ <!-- 
+ 			<form method="post" class="search" action="#">
+ 				<p><input name="search_query" class="textbox" type="text" />
+   				<input name="search" class="searchbutton" value="Search" type="submit" /></p>
+ 			</form>
+ -->
+ 						
+ 		</div>
+ 		
+        	<div id="main">
+ 			
+ 			<a name="Home"></a>
+ 			<h1>Home</h1>
+         <p>
+         Welcome to the Memory Safety Menagerie!  This web page is a virtual
+         library of research papers about memory safety.  I hope that it
+         provides a good starting point for researchers and students to learn
+         about the topic.
+         </p>
+ 
+         <p>
+         In an attempt to organize the vast literature on the topic, I have
+         created "sub-"menageries that collect together papers on similar
+         topics.  Organization is a tricky thing (just ask the guy who
+         discovered the platypus), so I suggest perusing the menagerie to get a
+         feel for what is inside.
+         </p>
+ 
+ <!--
+         <p>
+         The motivation for the menagerie was the lack of communication I
+         observed between reseachers on memory safety.  Memory safety underlies
+         security for C programs as well as soundness of compiler analyses.  It
+         therefore tends to be studied by the security community (which
+         publishes in both security and operating system related conferences) as
+         well as the compiler and programming language communities (which
+         publishes in compiler and programming language conferences).  The sheer
+         number of communities and conferences make memory safety research hard
+         to follow, so it's no wonder that researchers often do not either know
+         about the work of their peers or misunderstand it.
+         </p>
+ 
+         <p>
+         This web site aims to be a one-stop shop for memory safety research and
+         to provide an adequeate (overwhelming?) review of the literature to
+         budding memory-safety researchers.
+         </p>
+ -->
+ 		</div>
+ 
+     <!--#include virtual="sidebar.incl" -->
+ 		
+ <!-- wrap ends here -->
+ </div>
+ 
+ <!-- footer starts here -->
+ <!--#include virtual="footer.incl" -->
+ 	
+ </body>
+ </html>


Index: llvm-www/safecode/menagerie/memsafety.html
diff -c /dev/null llvm-www/safecode/menagerie/memsafety.html:1.1
*** /dev/null	Wed Jun  9 23:15:57 2010
--- llvm-www/safecode/menagerie/memsafety.html	Wed Jun  9 23:15:28 2010
***************
*** 0 ****
--- 1,169 ----
+ <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+ 
+ <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+ 
+ <head>
+ 
+ <title>Memory Safety Menagerie</title>
+ 
+ <meta http-equiv="content-type" content="application/xhtml+xml; charset=UTF-8" />
+ <meta name="author" content="Erwin Aligam - styleshout.com" />
+ <meta name="description" content="Site Description Here" />
+ <meta name="keywords" content="keywords, here" />
+ <meta name="robots" content="index, follow, noarchive" />
+ <meta name="googlebot" content="noarchive" />
+ 
+ <link rel="stylesheet" type="text/css" media="screen" href="images/Underground.css" />
+ 
+ </head>
+ 
+ <body>
+ <!-- wrap starts here -->
+ <div id="wrap">
+ 
+ 		<!-- header -->
+ 		<div id="header">			
+ 					
+ 			<!-- <span id="slogan"> your site slogan here...</span> -->
+ 			
+ 			<!-- tabs -->
+ 			<ul>
+ 				<li id="current"><a href="index.html"><span>Home</span></a></li>
+ 				<li><a href="index.html"><span>Archives</span></a></li>
+ 				<li><a href="index.html"><span>Downloads</span></a></li>
+ 				<li><a href="index.html"><span>Services</span></a></li>
+ 				<li><a href="index.html"><span>Support</span></a></li>
+ 				<li><a href="index.html"><span>About</span></a></li>			
+ 			</ul>
+ 											
+ 		</div>
+ 		
+ 		<div id="header-logo">			
+ 			
+ 			<div id="logo">Memory Safety <span class="red">Menagerie</span></div>		
+ 			
+ <!-- 
+ 			<form method="post" class="search" action="#">
+ 				<p><input name="search_query" class="textbox" type="text" />
+   				<input name="search" class="searchbutton" value="Search" type="submit" /></p>
+ 			</form>
+ -->
+ 						
+ 		</div>
+ 		
+        	<div id="main">
+ 			
+ 			<a name="intro"></a>
+ 			<h1>Introduction</h1>
+ 
+       <p>
+       Memory-safety for application level software is not only critical for
+       thwarting application attacks, but the techniques developed for
+       user-applications often form the basis of memory safety techniques for
+       specialized software (e.g., <a href="os.html">operating systems</a>).
+       Below are some research papers that provide the foundation of memory
+       safety research.
+       </p>
+ 
+ 			<a name="Papers"></a>
+ 			<h1>Memory Safety Papers</h1>
+ 
+ 				<ul>
+         <li><a href="http://llvm.org/pubs/2006-DSN-DanglingPointers.html">
+         <b>
+         Efficiently Detecting All Dangling Pointer Uses in Production Servers
+         </b></a>
+         <br>
+         Dinakar Dhurjati and Vikram Adve.
+         <br>
+         International Conference on Dependable Systems and Networks (DSN), 2006
+         </li>
+ 
+         <br>
+ 
+         <li><a href="http://llvm.org/pubs/2006-06-12-PLDI-SAFECode.html">
+         <b>
+         SAFECode: Enforcing Alias Analysis for Weakly Typed Languages
+         </b></a>
+         <br>
+         Dinakar Dhurjati, Sumant Kowshik, and Vikram Adve.
+         <br>
+         ACM SIGPLAN Conference on Programming Language Design and
+ Implementation (PLDI), June 2006
+         </li>
+ 
+         <br>
+ 
+         <li><a href="http://llvm.org/pubs/2006-05-24-SAFECode-BoundsCheck.html">
+         <b>
+         Backwards-Compatible Array Bounds Checking for C with Very Low Overhead
+         </b></a>
+         <br>
+         Dinakar Dhurjati and Vikram Adve.
+         <br>
+         International Conference on Software Engineering (ICSE), May 2006
+         </li>
+ 
+         <br>
+ 
+         <li><a href="http://llvm.org/pubs/2005-11-SAFECodeTR.html">
+         <b>
+         Enforcing Alias Analysis for Weakly Typed Languages </b></a>
+         <br>
+         Dinakar Dhurjati, Sumant Kowshik, and Vikram Adve.
+         <br>
+         Technical Report #UIUCDCS-R-2005-2657, Computer Science Dept., University of Illinois, Nov 2005
+         </li>
+ 
+         <br>
+ 
+         <li>
+         <a href="http://llvm.org/pubs/2005-02-TECS-SAFECode.html"><b>
+         Memory Safety Without Garbage Collection for Embedded Applications
+         </b></a>
+         <br>
+         Dinakar Dhurjati, Sumant Kowshik, Vikram Adve and Chris Lattner.
+         <br>
+         <a href="http://www.acm.org/tecs/">
+         <i>ACM Transactions in Embedded Computing Systems (TECS) </i></a>,
+         February 2005.
+         </li>
+ 
+         <br>
+ 
+         <li>
+         <a href="http://llvm.org/pubs/2003-05-05-LCTES03-CodeSafety.html"><b>
+         Memory Safety without Runtime Checks or Garbage Collection for Embedded
+         Systems
+         </b></a>
+         <br>
+         Dinakar Dhurjati, Sumant Kowshik, Vikram Adve and Chris Lattner.
+         <br>
+         Languages Compilers and Tools for Embedded Systems (LCTES), June 2003.
+         </li>
+ 
+         <br>
+ 
+         <li>
+         <a href="http://llvm.org/pubs/2002-08-08-CASES02-ControlC.html"><b>
+         Ensuring Code Safety without Runtime Checks for Real Time Control
+         Systems
+         </b></a>
+         <br>
+         Sumant Kowshik, Dinakar Dhurjati, Vikram Adve.
+         <br>
+         Internaltional Conference on Compilers, Architecture and Synthesis for
+         Embedded Systems (CASES), October 2002.
+         </li>
+ 		</div>
+ 
+     <!--#include virtual="sidebar.incl" -->
+ 
+ <!-- wrap ends here -->
+ </div>
+ 		
+ <!-- footer starts here -->
+ <!--#include virtual="footer.incl" -->
+ 
+ </body>
+ </html>


Index: llvm-www/safecode/menagerie/os.html
diff -c /dev/null llvm-www/safecode/menagerie/os.html:1.1
*** /dev/null	Wed Jun  9 23:15:57 2010
--- llvm-www/safecode/menagerie/os.html	Wed Jun  9 23:15:28 2010
***************
*** 0 ****
--- 1,137 ----
+ <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+ 
+ <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+ 
+ <head>
+ 
+ <title>Memory Safety Menagerie</title>
+ 
+ <meta http-equiv="content-type" content="application/xhtml+xml; charset=UTF-8" />
+ <meta name="author" content="Erwin Aligam - styleshout.com" />
+ <meta name="description" content="Site Description Here" />
+ <meta name="keywords" content="keywords, here" />
+ <meta name="robots" content="index, follow, noarchive" />
+ <meta name="googlebot" content="noarchive" />
+ 
+ <link rel="stylesheet" type="text/css" media="screen" href="images/Underground.css" />
+ 
+ </head>
+ 
+ <body>
+ <!-- wrap starts here -->
+ <div id="wrap">
+ 
+ 		<!-- header -->
+ 		<div id="header">			
+ 					
+ 			<!-- <span id="slogan"> your site slogan here...</span> -->
+ 			
+ 			<!-- tabs -->
+ 			<ul>
+ 				<li id="current"><a href="index.html"><span>Home</span></a></li>
+ 				<li><a href="index.html"><span>Archives</span></a></li>
+ 				<li><a href="index.html"><span>Downloads</span></a></li>
+ 				<li><a href="index.html"><span>Services</span></a></li>
+ 				<li><a href="index.html"><span>Support</span></a></li>
+ 				<li><a href="index.html"><span>About</span></a></li>			
+ 			</ul>
+ 											
+ 		</div>
+ 		
+ 		<div id="header-logo">			
+ 			
+ 			<div id="logo">Memory Safety <span class="red">Menagerie</span></div>		
+ 			
+ <!-- 
+ 			<form method="post" class="search" action="#">
+ 				<p><input name="search_query" class="textbox" type="text" />
+   				<input name="search" class="searchbutton" value="Search" type="submit" /></p>
+ 			</form>
+ -->
+ 						
+ 		</div>
+ 		
+        	<div id="main">
+ 			
+ 			<a name="intro"></a>
+ 			<h1>Introduction</h1>
+ 
+       <p>
+       In some ways, operating systems are just like any other user-space
+       program.  They are written in a high-level language, they allocate
+       memory, and they have pointers, references, and array indexing.
+       Enforcing memory safety for an operating system is conceptually the same
+       as enforcing memory safety on user-space applications.
+       </p>
+ 
+       <p>
+       And yet, operating systems are not quite the same.  They introduce new
+       challenges.  They often use custom alloctors, must induce very low
+       overhead, and have time-critical functionality.  Operating systems also
+       perform certain operations that are rare in the application world:
+       context switching, direct hardware I/O, and asynchronous event delivery,
+       just to name a few.
+       </p>
+ 
+       <p>
+       It's therefore not surprising that operating systems have gotten special
+       treatment in the research literature.  Below are some papers on this
+       specialized topic.
+       </p>
+ 			<a name="Papers"></a>
+ 			<h1>Operating System Memory Safety Papers</h1>
+ 
+ 				<ul>
+         <li><a href="http://llvm.org/pubs/2009-08-12-UsenixSecurity-SafeSVAOS.html">
+         <b>
+         Memory Safety for Low-Level Software/Hardware Interactions
+         </b></a>
+         <br>
+         John Criswell, Nicolas Geoffray, and Vikram Adve
+         <br>
+         <i>Proceedings of the Eighteenth USENIX Security Symposium</i>,
+         Montreal, Canada, August 2009.
+         </li>
+ 
+         <br>
+ 
+         <li><a href="http://llvm.org/pubs/2007-SOSP-SVA.html">
+         <b>
+         Secure Virtual Architecture: A Safe Execution Environment for Commodity
+         Operating Systems</b></a>
+         <br>
+         John Criswell, Andrew Lenharth, Dinakar Dhurjati, and Vikram Adve
+         <br>
+         <i>Proceedings of the Twenty First ACM Symposium on Operating Systems
+         Principles (SOSP '07)</i>, Stevenson, WA, October 2007.
+         <br>
+         <b> <font color="#FF00FF">
+         Received an SOSP 2007 Audience Choice Award.
+         </font></b>
+         </li>
+ 
+         <br>
+ 
+         <li>
+         <a href="http://llvm.org/pubs/2006-06-18-WIOSCA-LLVAOS.html">
+         <b>
+         A Virtual Instruction Set
+         Interface for Operating System Kernels</b></a>
+         <br>
+         John Criswell, Brent Monroe, and Vikram Adve.<br><i>
+         Workshop on the Interaction between Operating Systems and Computer
+         Architecture (WIOSCA '06)</i>, Boston, Massachusetts, 2006.<br></li>
+         </ul>
+         </li>
+ 		</div>
+ 
+     <!--#include virtual="sidebar.incl" -->
+ 
+ <!-- wrap ends here -->
+ </div>
+ 		
+ <!-- footer starts here -->
+ <!--#include virtual="footer.incl" -->
+ 
+ </body>
+ </html>


Index: llvm-www/safecode/menagerie/other.html
diff -c /dev/null llvm-www/safecode/menagerie/other.html:1.1
*** /dev/null	Wed Jun  9 23:15:57 2010
--- llvm-www/safecode/menagerie/other.html	Wed Jun  9 23:15:28 2010
***************
*** 0 ****
--- 1,122 ----
+ <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+ 
+ <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+ 
+ <head>
+ 
+ <title>Memory Safety Menagerie</title>
+ 
+ <meta http-equiv="content-type" content="application/xhtml+xml; charset=UTF-8" />
+ <meta name="author" content="Erwin Aligam - styleshout.com" />
+ <meta name="description" content="Site Description Here" />
+ <meta name="keywords" content="keywords, here" />
+ <meta name="robots" content="index, follow, noarchive" />
+ <meta name="googlebot" content="noarchive" />
+ 
+ <link rel="stylesheet" type="text/css" media="screen" href="images/Underground.css" />
+ 
+ </head>
+ 
+ <body>
+ <!-- wrap starts here -->
+ <div id="wrap">
+ 
+ 		<!-- header -->
+ 		<div id="header">			
+ 					
+ 			<!-- <span id="slogan"> your site slogan here...</span> -->
+ 			
+ 			<!-- tabs -->
+ 			<ul>
+ 				<li id="current"><a href="index.html"><span>Home</span></a></li>
+ 				<li><a href="index.html"><span>Archives</span></a></li>
+ 				<li><a href="index.html"><span>Downloads</span></a></li>
+ 				<li><a href="index.html"><span>Services</span></a></li>
+ 				<li><a href="index.html"><span>Support</span></a></li>
+ 				<li><a href="index.html"><span>About</span></a></li>			
+ 			</ul>
+ 											
+ 		</div>
+ 		
+ 		<div id="header-logo">			
+ 			
+ 			<div id="logo">Memory Safety <span class="red">Menagerie</span></div>		
+ 			
+ <!-- 
+ 			<form method="post" class="search" action="#">
+ 				<p><input name="search_query" class="textbox" type="text" />
+   				<input name="search" class="searchbutton" value="Search" type="submit" /></p>
+ 			</form>
+ -->
+ 						
+ 		</div>
+ 		
+        	<div id="main">
+ 			
+ 			<a name="intro"></a>
+ 			<h1>Introduction</h1>
+ 
+       <p>
+       While memory safety is at the heart of preventing attacks via undefined
+       semantic behavior, it is not the only approach to thwarting such attacks.
+       Information flow, randomization, and canaries have also been used to
+       detect attacks against undefined C program behavior.  A researcher in
+       memory safety should also be aware of these techniques and understand why
+       memory safety is a more comprehensive techniques.
+       </p>
+ 
+       <p>
+       Below are papers on various related topics to attack detection and
+       prevention.
+       </p>
+ 
+ 			<a name="infoflow"></a>
+ 			<h1>Information Flow Papers</h1>
+ 
+ 				<ul>
+         <li><a href="http://llvm.org/pubs/2009-08-12-UsenixSecurity-SafeSVAOS.html">
+         <b>
+         Memory Safety for Low-Level Software/Hardware Interactions
+         </b></a>
+         <br>
+         John Criswell, Nicolas Geoffray, and Vikram Adve
+         <br>
+         <i>Proceedings of the Eighteenth USENIX Security Symposium</i>,
+         Montreal, Canada, August 2009.
+         </li>
+ 
+         <br>
+ 
+         <li><a href="http://llvm.org/pubs/2007-SOSP-SVA.html">
+         <b>
+         Secure Virtual Architecture: A Safe Execution Environment for Commodity
+         Operating Systems</b></a>
+         <br>
+         John Criswell, Andrew Lenharth, Dinakar Dhurjati, and Vikram Adve
+         <br>
+         <i>Proceedings of the Twenty First ACM Symposium on Operating Systems
+         Principles (SOSP '07)</i>, Stevenson, WA, October 2007.
+         <br>
+         <b> <font color="#FF00FF">
+         Received an SOSP 2007 Audience Choice Award.
+         </font></b>
+         </li>
+         </ul>
+ 
+ 			<a name="random"></a>
+ 			<h1>Randomization Papers</h1>
+ 
+ 			<a name="adhoc"></a>
+ 			<h1>Ad Hoc Technique Papers</h1>
+ 		</div>
+ 
+     <!--#include virtual="sidebar.incl" -->
+ 
+ <!-- wrap ends here -->
+ </div>
+ 		
+ <!-- footer starts here -->
+ <!--#include virtual="footer.incl" -->
+ 
+ </body>
+ </html>


Index: llvm-www/safecode/menagerie/sidebar.incl
diff -c /dev/null llvm-www/safecode/menagerie/sidebar.incl:1.1
*** /dev/null	Wed Jun  9 23:15:57 2010
--- llvm-www/safecode/menagerie/sidebar.incl	Wed Jun  9 23:15:28 2010
***************
*** 0 ****
--- 1,19 ----
+ <div id="sidebar" >
+   <h1>General</h1>
+   <div class="left-box">
+     <ul class="sidemenu">
+       <li><a href="index.html">Home</a></li>
+     </ul>
+   </div>
+ 
+   <h1>Menageries</h1>
+   <div class="left-box">
+     <ul class="sidemenu">
+         <li><a href="memsafety.html">Memory Safety</a></li>
+         <li><a href="os.html">OS Memory Safety</a></li>
+         <li><a href="other.html">Other Security Techniques</a></li>
+         <li><a href="attacks.html">Memory Safety Attacks</a></li>
+     </ul>
+   </div>
+ </div>
+ 






More information about the llvm-commits mailing list