Stealth breakpoints

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn 2005, Issue , 2005, Pages 383-392

  Vasudevan, Amit ^a   Yerraballi, Ramesh ^a  

^a The University of Texas at Arlington   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER HARDWARE; MICROSCOPIC EXAMINATION; PROGRAM DEBUGGING; PROGRAM PROCESSORS; PUBLIC KEY CRYPTOGRAPHY; SECURITY OF DATA;

BINARY ANALYSIS; MALWARE ANALYSIS; SOFTWARE BREAKPOINTS; STEALTH TECHNIQUES;

CODES (SYMBOLS);

EID: 33751041896     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSAC.2005.52     Document Type: Conference Paper

References (26)

1. American Arium. Itanium ITP: Intel itanium ICE kit.
2. B. Beander. Vax debug: An interactive, symbolic, multilingual debugger. In Proceedings of the ACM SIGSOFT/SIGPIAN Software Engineering Symposium on High-Level Debugging, 1983.
3. P. A. Buhr, M. Karsten, and J. Shih. Kdb: A multithreadedde-bugger for multithreaded applications. In Proceedings of the SIGMETRICS symposium on Parallel and Distributed Tools, January 1996.
4. T. Cargill and B. Locanthi. Cheap hardware support for software debugging and profiling. In Proceedings of the Second International Conference on Architectural Support for Programming Languages and Operating Systems, October 1987.
5. H. Chen, C. Kao, and I. Huang. Analysis of hardware and software approaches to embedded in-circuit emulation of micro-processors. In Proceedings of the 7th Asia Pacific Conference on Computer Systems Architecture. Australian Computer Science Communications, January 2002.
6. Compuware Corporation. Debugging blue screens. Technical Paper, September 1999.
7. M. Copperman and J. Thomas. Poor man's watchpoints. ACM SIGPLAN Notices, January 1995.
8. Corelis. EMDT/K5 boundary-scan (JTAG) emulator for the AMD K5 processors.
9. G. W. Dunlap, S. T. King, S. Cinar, M. Basrai, and P. M. Chen. Revirt: Enabling intrusion analysis through virtual-machine logging and replay. In Proceedings of the 2002 Symposium on Operating Systems Design and Implementation (OSDI), December 2002.
10. Hewlette Packard. The WDB debugger. HP Technical Software.
11. M. S. Johnson. Some requirements for architectural support of software debugging. In Symposium on Architectural Support for Programming Languages and Operating Systems, April 1982.
12. P. Kessler. Fast breakpoints: design and implementation. In Proceedings of the conference on Programming Language design and implementation, June 1990.
13. S. T. King, G. W. Dunlap, and P. M. Chen. Debugging operating systems with time-traveling virtual machines. In Proceedings of the Usenix Annual Technical Conference - General Track, April 2005.
14. M. A. Linton. The evolution of dbx. In Proceedings of the Usenix Summer Conference, June 1990.
15. M. Loukides and A. Oram. Getting to know gdb. Linux Journal, 1996.
16. P. S. Magnusson, M. Christensson, J. Eskilson, G. Forsgren, G. Hallberg, J. Hogberg, F. Larsson, A. Moestedt, and B. Werner. Simics: A full system simulation platform. IEEE Computer Society, 2(35):50-58, February 2002.
17. McAfeelnc. The W9x.CIH virus. Virus Information Library, July 1998.
18. McAfeelnc. The W32.HIV virus. Virus Information Library, October 2000.
19. McAfee Inc. The W32.MyDoom virus. Virus Information Library, February 2004.
20. J. M. Mellor-Crummey and T. J. LeBlanc. A software instruction counter. In Proceedings of the Third International Conference on Architectural Support for Programming Languages and Operating Systems, April 1989.
21. V. Paxon. A survey of support for implementing debuggers. October 1990.
22. N. Ramsey. Correctness of trap-based breakpoint implementations. In Proceedings of 21st Symposium on Principles of Programming Languages, February 1994.
23. J. Robbins. Debugging windows based applications using windbg. Miscrosoft Systems Journal, 1999.
24. A. Vasudevan and R. Yerraballi. Sakthi: A retargetable dynamic framework for binary instrumentation. In Proceedings of the Hawaii International Conference in Computer Sciences, January 2004.
25. R. Wahbe. Efficient data breakpoints. In Proceedings of the 5th International Conference on Architectural Support for Programming Languages and Operating Systems, September 1992.
26. R. Wahbe, S. Lucco, and S. L. Graham. Practical data break-points: Design and implementation. In Proceedings of the conference on Programming Language Design and Implementation, June 1993.