Security protection of binary programs

摘要

The use of Software of Unknown Provenance (SOUP) in the development of modern information systems has become widespread and is difficult to avoid. Unfortunately, important properties of the software, such as critical security properties, cannot be assured with SOUP making the use of SOUP problematic. In this paper we summarize Kevlar, a comprehensive approach to enhancing the security of SOUP. Kevlar operates with access only to the binary program, i.e., no source code or other development documentation is required, and the current implementation supports Intel X86 software running on Ubuntu platforms.