M. Locasto, A. Stavrou, Gabriela F. Cretu-Ciocarlie, A. Keromytis
{"title":"From STEM to SEAD: Speculative Execution for Automated Defense","authors":"M. Locasto, A. Stavrou, Gabriela F. Cretu-Ciocarlie, A. Keromytis","doi":"10.7916/D84F1ZMS","DOIUrl":"https://doi.org/10.7916/D84F1ZMS","url":null,"abstract":"Most computer defense systems crash the process that they protect as part of their response to an attack. Although recent research explores the feasibility of self-healing to automatically recover from an attack, self-healing faces some obstacles before it can protect legacy applications and COTS (Commercial Off-The-Shelf) software. Besides the practical issue of not modifying source code, self-healing must know both when to engage and how to guide a repair. \u0000 \u0000Previous work on a self-healing system, STEM, left these challenges as future work. This paper improves STEM's capabilities along three lines to provide practical speculative execution for automated defense (SEAD). First, STEM is now applicable to COTS software: it does not require source code, and it imposes a roughly 73% performance penalty on Apache's normal operation. Second, we introduce repair policy to assist the healing process and improve the semantic correctness of the repair. Finally, STEM can create behavior profiles based on aspects of data and control flow.","PeriodicalId":88968,"journal":{"name":"Proceedings of the USENIX ... annual Technical Conference. USENIX Technical Conference","volume":"7 1","pages":"219-232"},"PeriodicalIF":0.0,"publicationDate":"2007-06-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"78615352","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"The Safe-Tcl Security Model","authors":"J. Levy, L. Demailly, J. Ousterhout, B. Welch","doi":"10.1007/3-540-68671-1_12","DOIUrl":"https://doi.org/10.1007/3-540-68671-1_12","url":null,"abstract":"","PeriodicalId":88968,"journal":{"name":"Proceedings of the USENIX ... annual Technical Conference. USENIX Technical Conference","volume":"87 1","pages":"217-234"},"PeriodicalIF":0.0,"publicationDate":"1998-06-15","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"72599467","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
A. Chankhunthod, P. Danzig, C. Neerdaels, M. Schwartz, K. Worrell
{"title":"A Hierarchical Internet Object Cache","authors":"A. Chankhunthod, P. Danzig, C. Neerdaels, M. Schwartz, K. Worrell","doi":"10.21236/ada446612","DOIUrl":"https://doi.org/10.21236/ada446612","url":null,"abstract":"This paper discusses the design and performance of a hierarchical proxy-cache designed to make Internet information systems scale better. The design was motivated by our earlier trace-driven simulation study of Internet traffic. We challenge the conventional wisdom that the benefits of hierarchical file caching do not merit the costs, and believe the issue merits reconsideration in the Internet environment. \u0000 \u0000The cache implementation supports a highly concurrent stream of requests. We present performance measurements that show that our cache outperforms other popular Internet cache implementations by an order of magnitude under concurrent load. These measurements indicate that hierarchy does not measurably increase access latency. Our software can also be configured as a Web-server accelerator; we present data that our httpd-accelerator is ten times faster than Netscape's Netsite and NCSA 1.4 servers. \u0000 \u0000Finally, we relate our experience fitting the cache into the increasingly complex and operational world of Internet information systems, including issues related to security, transparency to cache-unaware clients, and the role of file systems in support of ubiquitous wide-area information systems.","PeriodicalId":88968,"journal":{"name":"Proceedings of the USENIX ... annual Technical Conference. USENIX Technical Conference","volume":"92 1","pages":"153-164"},"PeriodicalIF":0.0,"publicationDate":"1996-01-22","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"83774647","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
{"title":"Flexible and Safe Resolution of File Conflicts","authors":"Puneet Kumar, M. Satyanarayanan","doi":"10.21236/ada289342","DOIUrl":"https://doi.org/10.21236/ada289342","url":null,"abstract":"In this paper we describe the support provided by the Coda File System for transparent resolution of conflicts arising from concurrent updates to a file in different network partitions. Such partitions often occur in mobile computing environments. Coda provides a framework for invoking customized pieces of code called application-specific resolvers (asrs) that encapsulate the knowledge needed for file resolution. If resolution succeeds, the user notices nothing more than a slight performance delay. Only if resolution fails does the user have to resort to manual repair. Our design combines a rule-based approach to ASR selection with transactional encapsulation of ASR execution. This paper shows how such an approach leads to flexible and efficient file resolution without loss of security or robustness.","PeriodicalId":88968,"journal":{"name":"Proceedings of the USENIX ... annual Technical Conference. USENIX Technical Conference","volume":"219 1","pages":"95-106"},"PeriodicalIF":0.0,"publicationDate":"1995-01-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"89112151","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}