Abstract
Our Application Security Monitor (ASM) is a run-time
monitor that dynamically collects execution-related data.
ASM is part of a security framework that will allow us to
explore different security policies aimed at identifying malicious
behavior such as Trojan horses and backdoors.
In this paper, we show what type of data ASM can collect
and illustrate how this data can be used to enforce a security
policy. Using ASM we are able to explore different tradeoffs
between security and performance.
1 Introduction
Criminal