Re: MITRE releases Polgen 1.4

[bsniffen@mitre.org (Brian T. Sniffen)]

[-- Attachment #1: Type: text/plain, Size: 1005 bytes --]

Karl MacMillan <kmacmillan@mentalrootkit.com> writes:

> Brian T. Sniffen wrote:
>>
>> Polgen handles the modularity of reference policy by searching through
>> .if files to find interfaces that will handle access requirements of
>> the program under analysis.  The technique used appears complementary
>> to Karl MacMillan's Madison library.
>
> Can you point me to the implementation inside of polgen? It would seem
> to be nice to merge this functionality into a single upstream
> implementation. Do you have any interest in pursuing this?

Absolutely.  The implementor, David Harris, is out on leave
for the next few weeks.  I believe the analogous code is in
polgen/src/patterns/{extract_ifs,refpol}.py.  We don't do everything
Sepolgen does, but we do generate new types.  I'd love to see these
capabilities merged.

-Brian

-- 
Brian T. Sniffen                                      bsniffen@mitre.org
The MITRE Corporation                                       781-271-2904

[-- Attachment #2: smime.p7s --]
[-- Type: application/x-pkcs7-signature, Size: 1381 bytes --]