A graph-based ML pipeline reports 95% accuracy detecting synthetic SELinux policy violations, but post-hoc violation-class refinement and no real-policy evaluation weaken the central claim.
Runtime Verification of Linux Kernel Security Module
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
abstract
The Linux kernel is one of the most important Free/Libre Open Source Software (FLOSS) projects. It is installed on billions of devices all over the world, which process various sensitive, confidential or simply private data. It is crucial to establish and prove its security properties. This work-in-progress paper presents a method to verify the Linux kernel for conformance with an abstract security policy model written in the Event-B specification language. The method is based on system call tracing and aims at checking that the results of system call execution do not lead to accesses that violate security policy requirements. As a basis for it, we use an additional Event-B specification of the Linux system call interface that is formally proved to satisfy all the requirements of the security policy model. In order to perform the conformance checks we use it to reproduce intercepted system calls and verify accesses.
citation-role summary
background 1
citation-polarity summary
fields
cs.LG 1years
2024 1verdicts
REJECT 1roles
background 1polarities
support 1representative citing papers
citing papers explorer
-
Machine Learning-Based Security Policy Analysis
A graph-based ML pipeline reports 95% accuracy detecting synthetic SELinux policy violations, but post-hoc violation-class refinement and no real-policy evaluation weaken the central claim.