Software Index
Linux Software Security Tools  

Systrace

download download home home   report broken
important software information
company name:
opensource
license: Freeware
minimum requirements: libevent
functional limitations:
Systrace description
The policy is generated interactively. Operations not covered by the policy raise an alarm, allowing an user to refine the currently configured policy.

For complicated applications, it is difficult to know the correct policy before running them. Initially, Systrace notifies the user about all system calls that an application tries to execute. The user configures a policy for the specific system call that caused the warning. After a few minutes, a policy is generated that allows the application to run without any warnings. However, events that are not covered still generate a warning. Normally, that is an indication of a security problem. Systrace improves cyber security by providing intrusion prevention.

Alternatively, policies can be learned automatically. In many instances, the automatically learned policies can be used for sandboxing immediately. Sometimes, minimal manual post-processing is necessary.

With Systrace, untrusted binary applications can be sandboxed. Their access to the system can be restricted almost arbitrarily. Sandboxing applications that are available only as binaries is only sensible, as it is not possible to directly analyze what they are designed to do. However, constraining the system calls that large open-source applications are allowed to execute is useful too, as it is very difficult to determine their correctness.

System call arguments can be rewritten dynamically. This effects a virtual chroot for the sandboxed application. It also prevents race conditions in the argument evaluation.. opensource - Publisher Page of Systrace - Downloadplex.com. Publisher of Systrace, Author of Systrace 1.6e. The policy is generated interactively. Operations not covered by the policy raise an alarm, allowing an user to refine the currently configured policy. For complicated applications, it is di
Similar software
Secure Data Manager (Popularity: ) : Secure Data Manager project is a manager for passwords and other private data.

Secure Data Manager (SDM) is a full-featured password manager application written entirely in Java (so it can run on Unix or Windows). It encrypts logins and other private ...

Snort Config (Popularity: ) : Snort Config provides an intuitive menu-based interface for the GPL IDS tool Snort.

SnortConf is a tool that provides a fairly intuitive menu-based text interface for setting up the GPL IDS tool Snort. It also provides error and sanity checking on ...

User reviews

Write a review:
1 2 3 4 5 6 7 8 9 10
1=poor 10=excellent
Write review*
Your name*
Email*
  (Comments are moderated, and will not appear on this site until the editor has approved them)
 
Rate me
supported os's
stats
downloads 6
version 1.6e
size in Kb 215
popularity   
1137/1272475
user rating 0/10
our rating 0 Stars
share info
Recommend Systrace
Report spyware
New Software
Popular Software
Latest Reviews