Educause Security Discussion mailing list archives

Harvard researchers take aim at Shellshock-like woes with new scripting language


From: "Avdagic, Indir" <iavdagic () SEAS HARVARD EDU>
Date: Sat, 27 Sep 2014 19:03:31 +0000

Hi all,

Harvard SEAS researchers are putting the finishing touches on a scripting language built to mitigate the damage caused 
by ShellShock and similar vulnerabilities.
The language, called Shill<http://shill.seas.harvard.edu/>, was designed to limit shell-based scripts so they can't 
access resources beyond what is specifically needed for the task at hand.
Shill scripting language limits the rights of shell programs to what is necessary to get the job done.

For more details please go to:
http://www.computerworld.com/article/2687891/security0/harvard-researchers-take-aim-at-shellshocklike-woes-with-new-scripting-language.html

Best,

~~Indir

______________________________________________________
Indir Avdagić, CISM, CISSP, ACSA, TICSA
Director of Information Security and Risk Management
& Int. Assoc. Director of Computing
Harvard University - SEAS
Email: indir_avdagic () harvard edu<mailto:iavdagic () seas harvard edu>
Phone: (617) 496-3502
______________________________________________________
PThink twice before you print
 CONFIDENTIALITY: This email (including any attachments) may contain confidential, proprietary and privileged 
information, and unauthorized disclosure or use is prohibited. If you received this email in error, please notify the 
sender and delete this email from your system.




Current thread: