A Nitpicker's guide to a minimal-complexity secure GUI


Malware such as Trojan Horses and spyware remain to be persistent security threats that exploit the overly complex graphical user interfaces of today’s commodity operating systems. In this paper, we present the design and implementation of Nitpicker—an extremely minimized secure graphical user interface that addresses these problems while retaining compatibility to legacy operating systems. We describe our approach of kernelizing the window server and present the deployed security mechanisms and protocols. Our implementation comprises only 1,500 lines of code while supporting commodity software such as X11 applications alongside protected graphical security applications. We discuss key techniques such as client-side window handling, a new floating-labels mechanism, dragand-drop, and denial-of-service-preventing resource management. Furthermore, we present an application scenario to evaluate the feasibility, performance, and usability of our

DOI: 10.1109/CSAC.2005.7

Extracted Key Phrases

8 Figures and Tables


Citations per Year

71 Citations

Semantic Scholar estimates that this publication has 71 citations based on the available data.

See our FAQ for additional information.

Cite this paper

@inproceedings{Feske2005ANG, title={A Nitpicker's guide to a minimal-complexity secure GUI}, author={Norman Feske and Christian Helmuth}, booktitle={ACSAC}, year={2005} }