1. ANDREA BITTAUMARK HANDLEY PETR MARCHENKOBRAD KARP COMPUTER SCIENCE DEPARTMENT UCL Fine-Grained Isolation for the Apache Web Server

2. Motivation & Problem Definition Apache Web Server network parser private key

3. Motivation & Problem Definition Apache Web Server network parser private key memory protection

4. Is partitioning easy? Apache Web Server network parser private key memory protection Apache worker process requires access to 222 heap and 389 global objects

5. Problem Statement Given a function, what memory does it access? Given memory items, which functions access them? Given a function that “generates” sensitive data, where does it propagate? Crowbar, our binary instrumentation tool, answers these questions

6. SSL-enabled Apache Web Server Apache Web Server network private key worker gen_session_key (~200 LoC) memory protection