Proceedings of the USENIX ... annual Technical Conference. USENIX Technical Conference最新文献

筛选
英文 中文
From STEM to SEAD: Speculative Execution for Automated Defense 从STEM到SEAD:自动化防御的推测执行
M. Locasto, A. Stavrou, Gabriela F. Cretu-Ciocarlie, A. Keromytis
{"title":"From STEM to SEAD: Speculative Execution for Automated Defense","authors":"M. Locasto, A. Stavrou, Gabriela F. Cretu-Ciocarlie, A. Keromytis","doi":"10.7916/D84F1ZMS","DOIUrl":"https://doi.org/10.7916/D84F1ZMS","url":null,"abstract":"Most computer defense systems crash the process that they protect as part of their response to an attack. Although recent research explores the feasibility of self-healing to automatically recover from an attack, self-healing faces some obstacles before it can protect legacy applications and COTS (Commercial Off-The-Shelf) software. Besides the practical issue of not modifying source code, self-healing must know both when to engage and how to guide a repair. \u0000 \u0000Previous work on a self-healing system, STEM, left these challenges as future work. This paper improves STEM's capabilities along three lines to provide practical speculative execution for automated defense (SEAD). First, STEM is now applicable to COTS software: it does not require source code, and it imposes a roughly 73% performance penalty on Apache's normal operation. Second, we introduce repair policy to assist the healing process and improve the semantic correctness of the repair. Finally, STEM can create behavior profiles based on aspects of data and control flow.","PeriodicalId":88968,"journal":{"name":"Proceedings of the USENIX ... annual Technical Conference. USENIX Technical Conference","volume":"7 1","pages":"219-232"},"PeriodicalIF":0.0,"publicationDate":"2007-06-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"78615352","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 32
The Safe-Tcl Security Model Safe-Tcl安全模型
J. Levy, L. Demailly, J. Ousterhout, B. Welch
{"title":"The Safe-Tcl Security Model","authors":"J. Levy, L. Demailly, J. Ousterhout, B. Welch","doi":"10.1007/3-540-68671-1_12","DOIUrl":"https://doi.org/10.1007/3-540-68671-1_12","url":null,"abstract":"","PeriodicalId":88968,"journal":{"name":"Proceedings of the USENIX ... annual Technical Conference. USENIX Technical Conference","volume":"87 1","pages":"217-234"},"PeriodicalIF":0.0,"publicationDate":"1998-06-15","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"72599467","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 172
A Hierarchical Internet Object Cache 一个分层因特网对象缓存
A. Chankhunthod, P. Danzig, C. Neerdaels, M. Schwartz, K. Worrell
{"title":"A Hierarchical Internet Object Cache","authors":"A. Chankhunthod, P. Danzig, C. Neerdaels, M. Schwartz, K. Worrell","doi":"10.21236/ada446612","DOIUrl":"https://doi.org/10.21236/ada446612","url":null,"abstract":"This paper discusses the design and performance of a hierarchical proxy-cache designed to make Internet information systems scale better. The design was motivated by our earlier trace-driven simulation study of Internet traffic. We challenge the conventional wisdom that the benefits of hierarchical file caching do not merit the costs, and believe the issue merits reconsideration in the Internet environment. \u0000 \u0000The cache implementation supports a highly concurrent stream of requests. We present performance measurements that show that our cache outperforms other popular Internet cache implementations by an order of magnitude under concurrent load. These measurements indicate that hierarchy does not measurably increase access latency. Our software can also be configured as a Web-server accelerator; we present data that our httpd-accelerator is ten times faster than Netscape's Netsite and NCSA 1.4 servers. \u0000 \u0000Finally, we relate our experience fitting the cache into the increasingly complex and operational world of Internet information systems, including issues related to security, transparency to cache-unaware clients, and the role of file systems in support of ubiquitous wide-area information systems.","PeriodicalId":88968,"journal":{"name":"Proceedings of the USENIX ... annual Technical Conference. USENIX Technical Conference","volume":"92 1","pages":"153-164"},"PeriodicalIF":0.0,"publicationDate":"1996-01-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"83774647","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 855
Flexible and Safe Resolution of File Conflicts 灵活和安全的解决文件冲突
Puneet Kumar, M. Satyanarayanan
{"title":"Flexible and Safe Resolution of File Conflicts","authors":"Puneet Kumar, M. Satyanarayanan","doi":"10.21236/ada289342","DOIUrl":"https://doi.org/10.21236/ada289342","url":null,"abstract":"In this paper we describe the support provided by the Coda File System for transparent resolution of conflicts arising from concurrent updates to a file in different network partitions. Such partitions often occur in mobile computing environments. Coda provides a framework for invoking customized pieces of code called application-specific resolvers (asrs) that encapsulate the knowledge needed for file resolution. If resolution succeeds, the user notices nothing more than a slight performance delay. Only if resolution fails does the user have to resort to manual repair. Our design combines a rule-based approach to ASR selection with transactional encapsulation of ASR execution. This paper shows how such an approach leads to flexible and efficient file resolution without loss of security or robustness.","PeriodicalId":88968,"journal":{"name":"Proceedings of the USENIX ... annual Technical Conference. USENIX Technical Conference","volume":"219 1","pages":"95-106"},"PeriodicalIF":0.0,"publicationDate":"1995-01-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"89112151","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 128
0
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
相关产品
×
本文献相关产品
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:604180095
Book学术官方微信
小红书