Preventing Information Leaks Through Shadow Executions

A concern about personal information confidentiality arises when any desktop application communicates to the external network, for example, to its producer’s server to obtain software version updates. We address this confidentiality concern of end users by an approach called shadow execution. A key property of shadow execution is that it allows applications to successfully communicate over the network while disallowing any information leaks. We describe the design and implementation of this approach for Windows applications. Experiments with our prototype implementation indicate that shadow execution allows applications to execute without inhibiting any behaviors, has acceptable performance overheads while preventing any information leaks.

 @inproceedings{
  Capizzi:08,
  author        = {Roberto Capizzi and Antonio Longo and V.N. Venkatakrishnan and Sistla, A. Prasad},
  crossref      = {ACSAC:2008},
  title         = {Preventing Information Leaks Through Shadow Executions}
}
@proceedings{
  ACSAC:2008,
  location      = {Anaheim, CA, USA},
  booktitle     = {24th Annual Computer Security Applications Conference},
  month         = dec,
  year          = {2008}
}