Facebook has announced the 2019 winners of the Internet Defense Prize, an award offered in partnership with USENIX.
Created in 2014, the award is meant to recognize and reward research that meaningfully makes the Internet more secure. The goal is to reward ideas that go beyond theory and which can be adopted to protect people in practice.
The 2019 great prize of $100,000, Facebook has announced, was awarded to Anjo Vahldiek-Oberwagner, Eslam Elnikety, Nuno O. Duarte, Michael Sammler, Peter Druschel, and Deepak Garg at the Max Planck Institute for Software Systems, Saarland Informatics Campus.
The researchers received the award for work titled ERIM: Secure, Efficient In-process Isolation with Protection Keys (MPK).
The paper presents a new technique to provide hardware-enforced isolation with low overhead on x86 CPUs. The idea combines protection keys, a feature that allows protection domain switches in userspace, with binary inspection, thus preventing circumvention.
The researchers demonstrate how ERIM can be applied to new and existing applications and say that it doesn’t require compiler changes. ERIM can run on a stock Linux kernel and, even at high domain switching rates, has low runtime overhead.
“Traditionally, software isolation has come with significant performance costs. The authors’ approach stands out because it achieves much better runtime efficiency due to lower overhead, which makes it practical for real-world use in production environments. If this type of defense finds widespread use, it will help eliminate an entire class of security exploits,” Facebook noted.
Related: Facebook Announces 2018 Internet Defense Prize Winners
Related: Facebook Awards $100,000 Prize for Spear-Phishing Detection Method
Related: Facebook Awards $100,000 for Post-Quantum TLS Security Research
More from Ionut Arghire
- Guardz Emerges From Stealth Mode With $10 Million in Funding
- Critical QNAP Vulnerability Leads to Code Injection
- GitHub Revokes Code Signing Certificates Following Cyberattack
- Vulnerabilities in OpenEMR Healthcare Software Expose Patient Data
- Russia-Linked APT29 Uses New Malware in Embassy Attacks
- Critical Vulnerability Impacts Over 120 Lexmark Printers
- BIND Updates Patch High-Severity, Remotely Exploitable DoS Flaws
- Microsoft Urges Customers to Patch Exchange Servers
Latest News
- Sentra Raises $30 Million for DSPM Technology
- Cyber Insights 2023: Cyberinsurance
- Cyber Insights 2023: Attack Surface Management
- Cyber Insights 2023: Artificial Intelligence
- Microsoft’s Verified Publisher Status Abused in Email Theft Campaign
- Guardz Emerges From Stealth Mode With $10 Million in Funding
- How the Atomized Network Changed Enterprise Protection
- Critical QNAP Vulnerability Leads to Code Injection
