paperbot · PL 论文追踪

全部论文 待读 收藏

P2 FreePart: Hardening Data Processing Software via Framework-based Partitioning and Isolation

FreePart:通过基于框架的划分与隔离加固数据处理软件
ASPLOS Proceedings of the 28th ACM International Conference on Architectural Support for Programming Languages and Operating Systems, Volume 42023匹配度 3/10 · 论文关注ML/数据处理框架的安全加固与隔离,虽涉及程序依赖分析和ML系统,但核心是安全隔离而非将静态分析应用于ML/Agentic程序,也未涉及LLM、浮点或贝叶斯程序分析,与研究方向交叉较弱。引用 1 inbox
Ali Ahad, Gang Wang, Chung Hwan Kim, Suman Jana, Zhiqiang Lin, Yonghwi Kwon
crossref: 2026-09-12

AI 速览

一句话:提出基于框架的划分与隔离方法,加固数据处理软件以减轻框架漏洞利用的影响。

数据处理型软件,尤其是机器学习应用,高度依赖 TensorFlow、OpenCV 等标准框架与库。随着这些框架广泛使用,其漏洞被利用已成为关键安全问题。软件隔离本可降低漏洞利用影响,但现有方法难以分析复杂的程序依赖,或带来过高开销,因而实践中效果有限。FreePart 提出基于框架的划分与隔离方案,旨在对数据处理软件进行加固:围绕框架边界对程序进行划分并实施隔离,以限制框架漏洞被利用后的影响,同时规避复杂依赖分析与高开销问题。摘要未给出具体实验数据、基准或性能指标,评估细节有待论文正文补充。

问题
数据处理软件尤其是 ML 应用依赖的 TensorFlow、OpenCV 等框架存在漏洞,被利用后影响严重;现有软件隔离方法因难以分析复杂程序依赖或开销过高而不实用。
方法
FreePart 采用基于框架的划分与隔离来加固数据处理软件,围绕框架边界切分并隔离程序组件,以限制框架漏洞利用的影响。
评估
摘要未报告具体实验评估;仅以现有隔离方法在依赖分析和开销上的不足作为问题动机。
原文摘要(Abstract)

Data processing oriented software, especially machine learning applications, are heavily dependent on standard frameworks/libraries such as TensorFlow and OpenCV. As those frameworks have gained significant popularity, the exploitation of vulnerabilities in the frameworks has become a critical security concern. While software isolation can minimize the impact of exploitation, existing approaches suffer from difficulty analyzing complex program dependencies or excessive overhead, making them ineffective in practice.

链接与引用

DOI 原文 · PDF(开放获取) ·

BibTeX
@inproceedings{paperbot10129,
  title = {FreePart: Hardening Data Processing Software via Framework-based Partitioning and Isolation},
  author = {Ali Ahad and Gang Wang and Chung Hwan Kim and Suman Jana and Zhiqiang Lin and Yonghwi Kwon},
  booktitle = {ASPLOS},
  year = {2023},
  doi = {10.1145/3623278.3624760}
}