2007 26th IEEE International Symposium on Reliable Distributed Systems (SRDS 2007)最新文献_第3页

RandSys: Thwarting Code Injection Attacks with System Service Interface Randomization 用系统服务接口随机化阻止代码注入攻击

2007 26th IEEE International Symposium on Reliable Distributed Systems (SRDS 2007) Pub Date : 2007-10-10 DOI: 10.1109/SRDS.2007.36

Xuxian Jiang, Helen J. Wang, Dongyan Xu, Yi-Min Wang

{"title":"RandSys: Thwarting Code Injection Attacks with System Service Interface Randomization","authors":"Xuxian Jiang, Helen J. Wang, Dongyan Xu, Yi-Min Wang","doi":"10.1109/SRDS.2007.36","DOIUrl":"https://doi.org/10.1109/SRDS.2007.36","url":null,"abstract":"Code injection attacks are a top threat to today's Internet. With zero-day attacks on the rise, randomization techniques have been introduced to diversify software and operation systems of networked hosts so that attacks that succeed on one host cannot succeed on others. Two most notable system-wide randomization techniques are instruction set randomization (ISR) and address space layout randomization (ASLR). The former randomizes instruction set for each process, while the latter randomizes the memory address space layout. Both suffer from a number of attacks. In this paper, we advocate and demonstrate that by combining ISR and ASLR effectively, we can offer much more robust protection than each of them individually. However, trivial combination of both schemes is not sufficient. To this end, we make the key observation that system call instructions matter the most to attackers for code injection. Our system, RandSys, uses system call instruction randomization and the general technique of ASLR along with a number of new enhancements to thwart code injection attacks. We have built a prototype for both Linux and Windows platforms. Our experiments show that RandSys can effectively thwart a wide variety of code injection attacks with a small overhead.","PeriodicalId":224921,"journal":{"name":"2007 26th IEEE International Symposium on Reliable Distributed Systems (SRDS 2007)","volume":"16 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-10-10","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127510320","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 51

Using Hidden Semi-Markov Models for Effective Online Failure Prediction 基于隐半马尔可夫模型的有效在线故障预测

2007 26th IEEE International Symposium on Reliable Distributed Systems (SRDS 2007) Pub Date : 2007-10-10 DOI: 10.1109/SRDS.2007.35

Felix Salfner, M. Malek

引用次数: 161

On the Latency Efficiency of Message-Parsimonious Asynchronous Atomic Broadcast 消息精简异步原子广播的延迟效率研究

2007 26th IEEE International Symposium on Reliable Distributed Systems (SRDS 2007) Pub Date : 2007-10-10 DOI: 10.1109/SRDS.2007.13

D. Dobre, H. Ramasamy, N. Suri

引用次数: 1

ASFALT: A Simple Fault-Tolerant Signature-based Localization Technique for Emergency Sensor Networks 一种简单的基于容错特征的应急传感器网络定位技术

2007 26th IEEE International Symposium on Reliable Distributed Systems (SRDS 2007) Pub Date : 2007-10-10 DOI: 10.1109/SRDS.2007.23

Murtuza Jadliwala, S. Upadhyaya, Manik Taneja

{"title":"ASFALT: A Simple Fault-Tolerant Signature-based Localization Technique for Emergency Sensor Networks","authors":"Murtuza Jadliwala, S. Upadhyaya, Manik Taneja","doi":"10.1109/SRDS.2007.23","DOIUrl":"https://doi.org/10.1109/SRDS.2007.23","url":null,"abstract":"We consider the problem of robust node deployment and fault-tolerant localization in wireless sensor networks for emergency and first response applications. Signature-based localization algorithms are a popular choice for use in such applications due to the non-uniform nature of the sensor node deployment. But, random destruction/disablement of sensor nodes in such networks adversely affects the deployment strategy as well as the accuracy of the corresponding signature-based localization algorithm. In this paper, we first model the phenomenon of sensor node destruction as a non-homogeneous Poisson process and derive a robust and efficient strategy for sensor node deployment based on this model. Next, we outline a protocol, called Group Selection Protocol, that complements current signature-based algorithms by reducing localization errors even when some nodes in a group are destroyed. Finally, we propose a novel yet simple localization technique, ASFALT, that improves the efficiency of the localization process by combining the simplicity of range-based schemes with the robustness of signature-based ones. Simulation experiments are conducted to verify the performance of the proposed algorithms.","PeriodicalId":224921,"journal":{"name":"2007 26th IEEE International Symposium on Reliable Distributed Systems (SRDS 2007)","volume":"29 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-10-10","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121154927","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 4

Enhancing Edge Computing with Database Replication 通过数据库复制增强边缘计算

2007 26th IEEE International Symposium on Reliable Distributed Systems (SRDS 2007) Pub Date : 2007-10-10 DOI: 10.1109/SRDS.2007.10

Yi Lin, Bettina Kemme, M. Patiño-Martínez, R. Jiménez-Peris

引用次数: 63

Framework for Intrusion Tolerant Certification Authority System Evaluation 入侵容忍认证机构系统评估框架

2007 26th IEEE International Symposium on Reliable Distributed Systems (SRDS 2007) Pub Date : 2007-10-10 DOI: 10.1109/SRDS.2007.14

Jingqiang Lin, Jiwu Jing, Peng Liu

{"title":"Framework for Intrusion Tolerant Certification Authority System Evaluation","authors":"Jingqiang Lin, Jiwu Jing, Peng Liu","doi":"10.1109/SRDS.2007.14","DOIUrl":"https://doi.org/10.1109/SRDS.2007.14","url":null,"abstract":"Various intrusion tolerant certification authority (CA) systems have been recently proposed to provide attack resistant certificate update/query services. However, it is difficult to compare them against each other directly due to diversity in system organizations, threshold cryptography schemes, protocols and usage scenarios. We present a framework for intrusion tolerant CA system evaluation, which consists of three components, namely, an intrusion tolerant CA model, a threat model and a metric for comparative evaluation. The framework covers system organizations, protocols, usage scenarios, period of certificate validity, revocation rate and mean time to recovery (MTTR). Based on the framework, four representative CA systems are evaluated and compared in three typical usage scenarios, producing reasonable and insightful results. The inter-dependency between usage scenarios and system characteristics is investigated, providing a guideline to design better systems for different usage scenarios. The proposed framework provides an effective method to evaluate intrusion tolerant CA systems quantitatively. Moreover, the comparison results offer valuable insights to further improve the attack resilience of intrusion tolerant CA systems.","PeriodicalId":224921,"journal":{"name":"2007 26th IEEE International Symposium on Reliable Distributed Systems (SRDS 2007)","volume":"55 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-10-10","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"126936749","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 3

Modeling and Assessing the Dependability ofWireless Sensor Networks 无线传感器网络的可靠性建模与评估

2007 26th IEEE International Symposium on Reliable Distributed Systems (SRDS 2007) Pub Date : 2007-10-01 DOI: 10.1109/SRDS.2007.28

M. Cinque, Domenico Cotroneo, C. Martino, S. Russo

{"title":"Modeling and Assessing the Dependability ofWireless Sensor Networks","authors":"M. Cinque, Domenico Cotroneo, C. Martino, S. Russo","doi":"10.1109/SRDS.2007.28","DOIUrl":"https://doi.org/10.1109/SRDS.2007.28","url":null,"abstract":"This paper proposes a flexible framework for dependability modeling and assessing of Wireless Sensor Networks (WSNs). The framework takes into account network related aspects (topology, routing, network traffic) as well as hardware/software characteristics of nodes (type of sensors, running applications, power consumption). It is composed of two basic elements: i) a parametric Stochastic Activity Networks (SAN) failure model, reproducing WSN failure behavior as inferred from a detailed Failure Mode Effect Analysis (FMEA), and ii) an external library reproducing network behavior on behalf of the SAN model. This library specializes the SAN model by feeding it with quantitative parameters obtained by simulation or by experimental campaigns; it is also in charge of updating the network state in response to failure events during the simulation (e.g., routing tree updated due to node failures). The framework is thus suited to evaluate the dependability of several WSNs, with different topologies, routing algorithms, hardware/software platforms, without requiring any changes to its structure. The use of the external library makes the model simpler, decoupling the network behavior from the failure behavior. Simulation experiments are discussed that provide a quantitative evaluation of WSN dependability for a sample scenario: results show how the proposed framework supports WSN developers to find proper cost-reliability trade-offs for the system being deployed.","PeriodicalId":224921,"journal":{"name":"2007 26th IEEE International Symposium on Reliable Distributed Systems (SRDS 2007)","volume":"7 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2007-10-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133135208","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 34

A Language-Based Approach for Improving the Robustness of Network Application Protocol Implementations 一种基于语言的提高网络应用协议实现鲁棒性的方法

2007 26th IEEE International Symposium on Reliable Distributed Systems (SRDS 2007) Pub Date : 2007-04-11 DOI: 10.1109/SRDS.2007.26

Laurent Burgy, Laurent Réveillère, J. Lawall, Gilles Muller

引用次数: 17

26th IEEE International Symposium on Reliable Distributed Systems - Introduction 第26届IEEE可靠分布式系统国际研讨会简介

2007 26th IEEE International Symposium on Reliable Distributed Systems (SRDS 2007) Pub Date : 1900-01-01 DOI: 10.1109/srds.2007.42

J. Huai, R. Baldoni, I. Yen

引用次数: 0