SelfSigned Executables: Restricting Replacement of Program Binaries by Malware

2nd USENIX Workshop on Hot Topics in Security

Glenn Wurster P.C. van Oorschot

PID  :  81296

来源: CEUR

【 摘 要 】

We propose using digital signatures to protect bi naries already on the system from modifications by malware. While applicable to any file which is not intended to be modified by an end user, we concen trate on protecting programs and libraries present on the system before infection. Our protection does not rely on a central trusted authority or PKI, and can be incrementally deployed. While presented in the con text of the Linux environment, our approach applies