Proceedings of the 13th European workshop on Systems Security最新文献

Automated data race bugs addition 自动数据竞争bug添加

Proceedings of the 13th European workshop on Systems Security Pub Date : 2020-04-27 DOI: 10.1145/3380786.3391401

Hongliang Liang, Mingyu Li, Jianli Wang

{"title":"Automated data race bugs addition","authors":"Hongliang Liang, Mingyu Li, Jianli Wang","doi":"10.1145/3380786.3391401","DOIUrl":"https://doi.org/10.1145/3380786.3391401","url":null,"abstract":"A challenge faced by concurrency bug detection techniques is the lack of ground-truth corpora, i.e., a lot of true concurrency bugs, making it difficult to evaluate and verify these technologies and tools, e.g., to precisely measure their false negative and false positive rates. In this paper, we present DRInject, a novel dynamic debugging based technique for producing ground-truth corpora by automatically and quickly injecting lots of realistic data race bugs into program source code. Each data race bug is assured by injecting modifying code to a global variable in two concurrency threads. These bugs are realistic in that they are embedded deep with programs and are triggered by real inputs. We have injected over 600 data race bugs into 10 benchmark or real-world programs, including water-nsquared, X264 and libvips. Moreover, we evaluated four data race detectors using the produced buggy programs and found there are much improvement space for these tools. Preliminary experiments show that DRInject can inject data race bugs in large scale programs and evaluate detect tools with fundamental quantities like false negative and false positive rate, which forms the basis to generate large bug corpora for the future research in concurrency software.","PeriodicalId":243224,"journal":{"name":"Proceedings of the 13th European workshop on Systems Security","volume":"17 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-04-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127745202","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 4

Secure and efficient in-process monitor (and library) protection with Intel MPK 安全高效的进程内监视器(和库)保护与英特尔MPK

Proceedings of the 13th European workshop on Systems Security Pub Date : 2020-04-27 DOI: 10.1145/3380786.3391398

Xiaoguang Wang, SengMing Yeoh, Pierre Olivier, B. Ravindran

{"title":"Secure and efficient in-process monitor (and library) protection with Intel MPK","authors":"Xiaoguang Wang, SengMing Yeoh, Pierre Olivier, B. Ravindran","doi":"10.1145/3380786.3391398","DOIUrl":"https://doi.org/10.1145/3380786.3391398","url":null,"abstract":"The process reference monitor is a common technique to enforce security policies for application execution. Reference monitors can be used to detect attacks, enforce access control, check program integrity and even transform program state. Deciding where the monitor resides involves a trade-off between strong monitor isolation and low switching overheads. Running the monitor in the same address space as the protected/traced application (in-process monitors) allows for low overhead but raises isolation concerns. Thus, existing work place monitors in a separate address space, which leads to expensive monitor invocation latencies. We present MonGuard, a system in which a high-performance in-process monitor is efficiently isolated from the rest of the application. To that aim, we leverage the Intel Memory Protection Key (MPK) technology to enforce execute-only memory, combined with code randomization to protect and hide the monitor. MonGuard instruments around sensitive instructions to further prevent possible code reuse attacks. The carefully constructed monitor call gate switches the monitor memory permission in a context-sensitive way. We have built a prototype of MonGuard mostly as a loader extension and implemented a multi-variant execution (MVX) monitor. The evaluation shows MonGuard performs faster than the out-of-process monitor approach.","PeriodicalId":243224,"journal":{"name":"Proceedings of the 13th European workshop on Systems Security","volume":"27 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-04-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127082295","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 18

What's all that noise: analysis and detection of propaganda on Twitter 这些噪音是什么:分析和检测Twitter上的宣传

Proceedings of the 13th European workshop on Systems Security Pub Date : 2020-04-27 DOI: 10.1145/3380786.3391399

Ansgar Kellner, Christian Wressnegger, Konrad Rieck

引用次数: 3

X-AFL: a kernel fuzzer combining passive and active fuzzing X-AFL:一种结合被动和主动模糊的核心模糊器

Proceedings of the 13th European workshop on Systems Security Pub Date : 2020-04-27 DOI: 10.1145/3380786.3391400

Hongliang Liang, Yixiu Chen, Zhuosi Xie, Zhiyi Liang

引用次数: 4

Microservices made attack-resilient using unsupervised service fissioning 微服务使用无监督的服务分裂实现了攻击弹性

Proceedings of the 13th European workshop on Systems Security Pub Date : 2020-04-27 DOI: 10.1145/3380786.3391395

A. F. Baarzi, G. Kesidis, D. Fleck, A. Stavrou

引用次数: 12

Aim low, shoot high: evading aimbot detectors by mimicking user behavior 瞄准低，射击高:通过模仿用户行为逃避目标机器人探测器

Proceedings of the 13th European workshop on Systems Security Pub Date : 2020-04-25 DOI: 10.1145/3380786.3391397

Tim Witschel, Christian Wressnegger

引用次数: 4

PANDAcap: a framework for streamlining collection of full-system traces PANDAcap:一个简化全系统跟踪收集的框架

Proceedings of the 13th European workshop on Systems Security Pub Date : 2020-04-23 DOI: 10.1145/3380786.3391396

Manolis Stamatogiannakis, H. Bos, Paul T. Groth

引用次数: 1

Proceedings of the 13th European workshop on Systems Security 第十三届欧洲系统安全研讨会论文集

Proceedings of the 13th European workshop on Systems Security Pub Date : 2017-04-23 DOI: 10.1145/3380786

Cristiano Giuffrida, A. Stavrou

引用次数: 0