imported>Citation bot: Add: website. | Use this bot. Report bugs. | Suggested by Whoop whoop pull up | #UCB_webform 1480/3352

2023-03-27T08:43:13Z

Add: website. | Use this bot. Report bugs. | Suggested by Whoop whoop pull up | #UCB_webform 1480/3352

New page

{{Short description|Security technology in Microsoft Windows}}
'''User Interface Privilege Isolation''' ('''UIPI''') is a technology introduced in [[Windows Vista]] and [[Windows Server 2008]] to combat [[shatter attack]] exploits. By making use of [[Mandatory Integrity Control]], it prevents processes with a lower "integrity level" (IL) from sending messages to higher IL processes (except for a very specific set of UI messages).<ref name="msdn">{{cite web
|url=http://msdn2.microsoft.com/en-us/library/aa905330.aspx
|title=The Windows Vista and Windows Server 2008 Developer Story: Windows Vista Application Development Requirements for User Account Control (UAC)
|publisher=[[Microsoft]]
|date=April 2007
|access-date=2007-12-07
}}</ref>

Window messages are designed to communicate user action to processes. However, they can be used to [[arbitrary code execution|run arbitrary code]] in the receiving process' context. This could be used by a malicious low-privilege processes to run arbitrary code in the context of a higher-privilege process, which constitutes an unauthorized [[privilege escalation]]. By restricting the ability of lower-privileged processes to send window messages to higher-privileged processes, UIPI can mitigate these kinds of attacks.<ref name="coseinc">{{cite web
|url=https://www.coseinc.com/en/index.php?rt=download&act=publication&file=Vista_UIPI.ppt.pdf
|archive-url=https://web.archive.org/web/20120418173959/https://www.coseinc.com/en/index.php?rt=download&act=publication&file=Vista_UIPI.ppt.pdf
|url-status=dead
|archive-date=2012-04-18
|title=Windows Vista UIPI
|author=Edgar Barbosa
|publisher=COSEINC
|access-date=2012-04-18
}} </ref>

UIPI, and Mandatory Integrity Control more generally, is a security feature but not a security ''boundary''.<ref name="msrc">{{cite web
|url=https://www.microsoft.com/en-us/msrc/windows-security-servicing-criteria
|title=Microsoft Security Servicing Criteria for Windows
|website=[[Microsoft]]
}}</ref>

[[Microsoft Office 2010]] uses UIPI for its Protected View [[Sandbox (computer security)|sandbox]] to prohibit potentially unsafe documents from modifying components, files, and other resources on a system.<ref name="ProtectedView">{{cite web |url=https://blogs.technet.microsoft.com/office2010/2009/08/13/protected-view-in-office-2010/ |title=Protected View in Office 2010 |last=Malhotra |first=Mike |date=August 13, 2009 |publisher=[[Microsoft]] |work=[[Microsoft TechNet|TechNet]] |access-date=September 22, 2017}}</ref>

==References==
{{reflist}}

{{Windows Components}}

[[Category:Windows Vista]]
[[Category:Microsoft Windows security technology]]

User Interface Privilege Isolation - Revision history

imported>Citation bot: Add: website. | Use this bot. Report bugs. | Suggested by Whoop whoop pull up | #UCB_webform 1480/3352