Using memory errors to attack a virtual machine

Proceedings of the IEEE Computer Society Symposium on Research in Security and Privacy

Volumn , Issue , 2003, Pages 154-165

  Govindavajhala, Sudhakar ^a   Appel, Andrew W ^a  

^a PRINCETON UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DATA STORAGE EQUIPMENT; JAVA PROGRAMMING LANGUAGE; SECURITY OF DATA; SMART CARDS;

BYTECODE VERIFIER; MEMORY ERRORS; VIRTUAL MACHINES;

VIRTUAL REALITY;

EID: 0037810696     PISSN: 10637109     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (21)

1. R. Anderson and M. Kuhn. Tamper Resistance - a Cautionary Note. In Proceedings of the Second Usenix Workshop on Electronic Commerce, pages 1-11, Nov. 1996.
2. R. Anderson and M. Kuhn. Low cost attacks on tamper resistant devices. In IWSP: International Workshop on Security Protocols, LNCS, 1997.
3. D. Boneh, R. A. DeMillo, and R. J. Lipton. On the importance of checking cryptographic protocols for faults. Lecture Notes in Computer Science, 1233:37-51, 1997.
4. S. Borman. Understanding the IBM Java garbage collector. www-106.ibm.com/developerworks/ibm/library/igarbage2/, Aug. 2002. web page fetched October 8, 2002.
5. C. Colby, P. Lee, G. C. Necula, F. Blau, K. Cline, and M. Plesko. A certifying compiler for Java. In Proceedings of the 2000 ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI '00), New York, June 2000. ACM Press.
6. A. Corporation. Neutrons from above: Soft error rates Q&As. Technical Report http://www.actel.com/appnotes/SER_QAs.pdf, Actel Corporation, July 2002.
7. D. Dean, E. W. Felten, and D. S. Wallach. Java security: From HotJava to Netscape and beyond. In Proceedings of 1996 IEEE Symposium on Security and Privacy, May 1996.
8. S. Drossopoulou and S. Eisenbach. Describing the semantics of Java and proving type soundness. In J. Alves-Foss, editor, Formal Syntax and Semantics of Java, LNCS. Springer, 1998.
9. S. Drossopoulou, T. Valkevych, and S. Eisenbach. Java type soundness revisited. Technical report, Imperial College Lodnon, Sept. 2000.
10. G. McGraw and E. W. Felten. Securing Java. John Wiley & Sons, 1999.
11. E. Normand. Single event upset at ground level. IEEE Transactions on Nuclear Science, 43:2742, 1996.
12. E. Normand. Boeing Radiation Effects Laboratory, personal communication, Oct. 2002.
13. E. Normand. Boeing Radiation Effects Laboratory, e-mail, Oct. 2002.
14. T. J. O'Gorman, J. M. Ross, A. H. Taber, J. F. Ziegler, H. P. Muhlfeld, C. J. Montrose, H. W. Curtis, and J. L. Walsh. Field testing for cosmic ray soft errors in semiconductor memories. IBM Journal of Research and Development, 40:41-50, Jan. 1996.
15. D. Patterson. personal communication, Oct. 2002.
16. M. Schuette. Enhanced Memory Systems Inc., e-mail, Nov. 2002.
17. M. Schuette. Enhanced Memory Systems Inc., personal communication, Sept. 2002.
18. T. Tso. random.c - a strong random number generator, 1994. drivers/char/random.c in Linux 2.4.19 source tree.
19. D. Von Oheimb and T. Nipkow. Machine-checking the Java specification: Proving type-safety. In J. Alves-Foss, editor, Formal Syntax and Semantics of Java, volume 1523 of LNCS, pages 119-156. Springer, 1999.
20. J. Xu, S. Chen, Z. Kalbarczyk, and R. K. Iyer. An experimental study of security vulnerabilities caused by errors. In Proceedings of the IEEE International Conference on Dependable Systems and Networks (DSN-01), July 2001.
21. J. F. Ziegler, H. W. Curtis, H. P. Muhlfeld, C. J. Montrose B. Chin, M. Nicewicz, C. A. Russell, W. Y. Wang, L. B. Freeman, P. Hosier, L. E. LaFave, J. L. Walsh, J. M. Orro, G. J. Unger, J. M. Ross, T. J. O'Gorman, B. Messina, T. D. Sullivan, A. J. Sykes, H. Yourke, T. A. Enger, V. Tolat, T. S. Scott, A. H. Taber, R. J. Sussman, W. A. Klein, and C. W. Wahaus. IBM experiments in soft fails in computer electronics (1978-1994). IBM Journal of Research and Development, 40:3-18, Jan. 1996.