Modeling and evaluating the security threats of transient errors in firewall software

Performance Evaluation

Volumn 56, Issue 1-4, 2004, Pages 53-72

  Chen, Shuo ^a   Xu, Jun ^a   Kalbarczyk, Zbigniew ^a   Iyer, Ravishankar K ^a   Whisnant, Keith ^a  

^a UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

Author keywords

Firewall software; SAN model; Security; Transient errors

Indexed keywords

COMPUTER HARDWARE; COMPUTER SIMULATION; COMPUTER SYSTEM FIREWALLS; CRYPTOGRAPHY; DATABASE SYSTEMS; ERROR DETECTION; RANDOM PROCESSES; SECURITY OF DATA;

FIREWALL SOFTWARE; SAN MODEL; SECURITY; STOCHASTIC ACTIVITY NETWORK (SAN); TRANSIENT ERRORS;

COMPUTER SOFTWARE;

EID: 1042288833     PISSN: 01665316     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.peva.2003.07.013     Document Type: Conference Paper

References (28)

1. R. Anderson, M.G. Kuhn, Tamper resistance - a cautionary note, in: Proceedings of the Second USENIX Workshop on Electronic Commerce, Oakland, CA, November 1996.
2. D. Boneh, R.A. DeMillo, et al., On the importance of eliminating errors in cryptographic computations, in: Advances in Cryptology: Eurocrypt'97, 1997, pp. 37-51.
3. A. Ghosh, T. O'Connor, et al., An automated approach for identifying potential vulnerabilities in software, in: IEEE Symposium on Security and Privacy, Oakland, CA, May 1998.
4. Rivest R.L., Shamir A., Adleman L. A method for obtaining digital signatures and public key cryptosystem. Commun. ACM. 21(2):1978;120-126.
5. D.T. Stott, B. Floering, et al., Dependability assessment in distributed systems with lightweight fault injectors in NFTAPE, in: Proceedings of the IEEE International Computer Performance and Dependability Symposium, March 2000, pp. 91-100.
6. J. Xu, S. Chen, et al., An experimental study of security vulnerabilities caused by errors, in: Proceedings of the International Conference on Dependable Systems and Networks, Göteborg, Sweden, 2001.
7. P. Kochar, J. Jaffe, B. Jun, Differential power analysis: leaking secrets, in: Crypto'99.
8. R. Russell, Linux IPCHAINS-HOWTO. http://netfilter.samba.org/ipchains/HOWTO.html.
9. Y. He, A. Avizienis, Assessment of the applicability of COTS microprocessors in high-confidence computing systems: a case study, in: Proceedings of the ICDSN 2000, June 2000.
10. M. Rimen, J. Ohlsson, et al., On microprocessor error behavior modeling, in: Proceedings of the IEEE International Symposium on Fault-Tolerant Computing (FTCS-24), June 1994.
11. H. Cha, E. Rudnick, J. Patel, et al., A gate-level simulation environment for alpha-particle-induced transient faults, IEEE Trans. Comput. 45 (11) (1996) 1248-1256.
12. G. Choi, R. Iyer, D. Saab, Fault behavior dictionary for simulation of device-level transients, in: Proceedings of the IEEE International Conference on Computer-Aided Design, 1993.
13. I. Lee, R. Iyer, D. Tang, Error/failure analysis using event logs from fault tolerant systems, in: Proceedings of the IEEE International Symposium on Fault-Tolerant Computing (FTCS-21), June 1991, pp. 10-17.
14. Ortalo R., Deswarte Y., Kaaniche M. Experimenting with quantitative evaluation tools for monitoring operational security. IEEE Trans. Software Eng. 25(5):1999;633-650.
15. D. Daly, D.D. Deavours, et al., Mobius: an extensible tool for performance and dependability modeling, in: Proceedings of the 11th International Conference, TOOLS 2000, Schaumburg, IL, March 2000.
16. http://www.securityfocus.com , December 30, 2001.
17. Microsoft Product Security, FrontPage Server Extension Sub-Component Buffer Overflow Vulnerability. http://www.securiteam.com/windowsntfocus/5YP0M0U4KA.html.
18. D. Patterson, J. Hennessy, Computer Architecture a Quantitative Approach, 2nd ed., Morgan Kaufmann, Los Altos, CA, 1996, 384 pp.
19. G. Xu, H. Zhang, Advanced methods for detecting unusual behaviors on networks in real-time, in: Proceedings of the IEEE International Conference on Communication Technology, vol. 1, WCC-ICCT 2000, 2000, pp. 291-295.
20. M. Joye, J.-J. Quisquater, F. Bao, R.H. Deng, RSA-type signatures in the presence of transient fault, in: Cryptography and Coding, Lecture Notes in Computer Science, vol. 1335, Springer, Berlin, 1997, pp. 155-160.
21. A. Menezes, P. van Oorschot, S. Vanstone, Handbook of Applied Cryptography, CRC Press, Boca Raton, 1996, pp. 284-291.
22. D. Stott, Automated fault-injection-based dependability analysis of distributed computer systems, Ph.D. Dissertation, University of Illinois at Urbana-Champaign, Urbana, IL, 2001.
23. D. Wreski, Linux Kernel 2.4 Firewalling Matures: Netfilter. http://www.linuxsecurity.com/feature_stories/kernel-netfilter.html.
24. R. Ronen, A. Mendelson, K. Lai, et al., Coming challenges in microarchitecture and architecture, Proc. IEEE 89 (3) (2001) 325-340.
25. Ziegler J.F., et al. IBM experiments in soft fails in computer electronics (1978-1994). IBM J. R&D. 40(1):1996;3-18.
26. PCI PC Watchdog Board User's Manual, Berkshire Products Inc. http://www.berkprod.com/pci_pc_watchdog.htm .
27. IPAudit. http://ipaudit.sourceforge.net/.
28. SNORT: The Open Source Network Intrusion Detection System. http://www.snort.org/.