Title :
Goalkeeper: close-in interface protection
Author :
Wolthusen, Stephen D.
Author_Institution :
IGD, Fraunhofer-Inst., Germany
Abstract :
This paper discusses a potential security issue in common operating system and application environments regarding dynamically attached devices and device interfaces. A set of countermeasures for the identified threats is described along with the integration of countermeasures into a policy-based security infrastructure; finally, an implementation of the countermeasure in the form of a policy enforcement module integrated into the kernel of the Microsoft Windows 2000/XP family of operating systems is described.
Keywords :
computer interfaces; operating system kernels; security of data; countermeasures; device interface protection; operating system; policy enforcement module; policy-based security infrastructure; Application software; Bluetooth; Communication system control; Firewire; Kernel; Operating systems; Protection; Security; Universal Serial Bus; Workstations;
Conference_Titel :
Computer Security Applications Conference, 2003. Proceedings. 19th Annual
Print_ISBN :
0-7695-2041-3
DOI :
10.1109/CSAC.2003.1254338
