|
Security '03 Paper   
[Security '03 Technical Program]
Scrash: A System for Generating Secure Crash InformationPete Broadwell
Matt Harren
Naveen Sastry1
Abstract:
This paper presents Scrash, a system that safeguards user privacy by
removing sensitive data from crash reports that are sent to developers after
program failures. Remote crash reporting, while of great help to the
developer, risks the user's privacy because crash reports may contain
sensitive user information such as passwords and credit card numbers. Scrash
modifies the source code of C programs to ensure that sensitive
data does not appear in a crash report. Scrash adds only a small amount of
run-time overhead and requires minimal involvement on the part of the
developer.
Naveen Sastry 2003-05-12 |
This paper was originally published in the
Proceedings of the 12th USENIX Security Symposium,
August 48, 2003,
Washington, DC, USA
Last changed: 27 Aug. 2003 aw |
|