Abstract:Over the years, the complexity of the Linux Security Module (LSM) is keeping increasing, and the count of the authorization hooks is nearly doubled. It is important to provide up-to-date measurement results of LSM for system practitioners so that they can make prudent trade-offs between security and performance. This work evaluates the overhead of LSM for file accesses on Linux v5.3.0. We build a performance evaluation framework for LSM. It has two parts, an extension of LMBench2.5 to evaluate the overhead of file operations for different security modules, and a security module with tunable latency for policy enforcement to study the impact of the latency of policy enforcement on the end-to-end latency of file operations. In our evaluation, we find opening a file would see about 87% (Linux v5.3) performance drop when the kernel is integrated with SELinux hooks (policy enforcement disabled) than without, while the figure was 27% (Linux v2.4.2). We found that performance of the above downgrade is affected by two parts, policy enforcement and hook placement. To further investigate the impact of policy enforcement and hook placement respectively, we build a Policy Testing Module, which reuses hook placements of LSM, while alternating latency of policy enforcement. With this module, we are able to quantitatively estimate the impact of the latency of policy enforcement on the end-to-end latency of file operations by using a multiple linear regression model and count policy authorization frequencies for each syscall. We then discuss and justify the evaluation results with static analysis on our enhanced syscalls' call graphs.

Implementation and Automatic Testing for Security Enhancement of Linux Based on Least Privilege

Introduction to the Special Issue on Design for Testability and Reliability of Security-aware Hardware

Vulnerability Testing of Desktop OS Based on Linux

A Framework for Implementing Dynamically Modified Least Privilege Security Policy

RESEARCH AND IMPLEMENTATION OF SECURITY KERNEL SYSTEM FOR SERVER SYSTEM

Implementing the principle of least administrative privilege on operating systems: challenges and perspectives

Template for Preparation of Manuscripts for Tsinghua Science and Technology

Detecting Privilege Escalation Attacks through Instrumenting Web Application Source Code.

Enforcing the principle of least privilege with a state-based privilege control model

Secguard: Secure And Practical Integrity Protection Model For Operating Systems

Electrical Engineering and Computer Science SSL INT : A Tool for Detecting TLS Certificate Validation Vulnerabilities April 2016

Towards Life-long Software Self-validation in Production

Implementation of Security Features in Software Development Phases

Automated Software Testing Starting from Static Analysis: Current State of the Art

Analyzing the Overhead of Filesystem Protection Using Linux Security Modules

DESIGN AND IMPLEMENTATION OF SECURITY AUDITING SYSTEM FOR LINUX SERVER

Research and Implementation on Process Access Control Based on SELinux Mandatory Access Control

Linux security

A Model Based Framework for Testing Safety and Security in Operational Technology Environments

Mandatory Access Control Mechanism of Executable Program under LSM

DBMS Security Independence Test Framework Design and Implementation