Preventing Dynamic Library Compromise on Node.js via RWX-Based Privilege Reduction

Presenting MIR a system addressing dynamic compromise by introducing a fine-grained read-write-execute (RWX) permission model at the boundaries of libraries.

Quick Jump: Installation | Run | Repo Structure | Documentation

Installation

This repo include both static and dynamic analysis tools.

Static Analysis

Option 1: Npm

npm i @andromeda/mir-sa --save-dev

If you want to install globally, so as to analyzing any program or library in the system, replace --save-dev with -g.

Dynamic Analysis

Option 1: Npm

npm i @andromeda/mir-da --save-dev

If you want to install globally, so as to analyzing any program or library in the system, replace --save-dev with -g.

Option 2: From source

git clone https://github.com/andromeda/mir/
cd mir/dynamic
npm install

Run

In order to quickly run static analysis:

mir-sa -p ./node_modules | jq .

In order to quickly run dynamic analysis:

mir-da -p ./node_modules

Repo Stracture

This repo hosts all the different components of the MIR paper. This repo is stractured as follows:

• Static Analysis
• Dynamic Analysis
• Vulnerabilities

Documentation

• Paper