Sanitizing private data for repair systems

[摘要] The SOLAR system helps restore interconnected system integrity after security attacks with a focus of minimizing the exposure of sensitive data in the repair logs. It builds upon Warp, a repair system for Django web applications which logs all major actions taken by the server from incoming request to outgoing response, and addresses the inherent security vulnerability of logging all data and actions. It provides application developers with a way of notating particular fields as sensitive and ensures that the exposure of these fields to the logs are minimized while maintaining and improving the reexecution of code during repair operations. A series of tests were written to show that SOLAR continues to support repair operations even with certain data removed.

[发布机构] Massachusetts Institute of Technology