A format-independent architecture for run-time integrity checking of executable code

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 2576, Issue , 2003, Pages 219-233

  Catuogno, Luigi ^a   Visconti, Ivan ^a  

^a UNIVERSITY OF SALERNO   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

CODES (SYMBOLS); NETWORK ARCHITECTURE; SECURITY OF DATA;

EXECUTABLE CODES; FORMAT-INDEPENDENT; INTEGRITY CHECKING; MALICIOUS CODES; NETWORK INTRUSIONS; REMOTE SYSTEMS; SERVICE RELIABILITY; UNAUTHORIZED ACCESS;

EMBEDDED SYSTEMS;

EID: 33845531199     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/3-540-36413-7_16     Document Type: Article

References (22)

1. W. A. Arbaugh, G. Ballintijn, L. van Doorn: Signed Executables for Linux. Tech. Report CS-TR-4259. University of Maryland, June 4, 2001
2. W. Arbaugh, D. Farber, J. Smith: A Secure and Reliable Bootstrap Architecture. Proceedings of 1997 IEEE Symposium on Security and Privacy, pp. 65-71. May 1997.
3. S. Cesare: Unix ELF parasites and virus. Unpublished technical report, http://www.big.net.au/silvio/elf-pv.txt
4. S. Cesare: Runtime Kernel KMEM Patching. Unpublished technical report. http://www.big.net.au/silvio/runtime-kernel-kmem-patching.txt
5. C. Cowan, C. Pu, D. Maier, H. Hinton, J. Walpole, P. Bakke, S. Beattie, A. Grier, P. Wagle, Q. Zhang: StackGuard: Automatic Adaptive Detection and Prevention of Buffer-Overflow Attacks. Proc. 7th USENIX Security Conference, pp. 63-78. San Antonio Texas, Jan. 1998
6. C. Cowan, P. Wagle, C. Pu, S. Beattie, J. Walpole: Buffer Overflows: Attacks and Defenses for the Vulnerability of the decade. DARPA Information Survivability Conference an Expo (DISCEX). Hilton Head Island SC, Jan. 2000
7. Halflife: Bypassing Integrity Checking Systems. Phrack, issue 51. September 1997.
8. N. Itoi, W. A. Arbaugh, S. J. Pollak, D. M. Reeves: Personal Secure Booting. Proceedings of Australian Conference on Information Security and Privacy, pp. 130-144. Sydney, July 11-13, 2001
9. Tool Interface Standards Committee: Tool Interface Standards (TIS) Portable Formats Specification version 1.1. http://developer.intel.com/vtune/tis.htm, October 1993
10. H. Lu: ELF: From the programmer perspective. http://citeseer.nj.nec.com/lu95elf.html. May 17, 1995
11. G. H. Kim, E. H. Spafford: The design and Implementation of Tripwire: a System Integrity Checker. Proceedings of Conference on Computer and Communications Security, pages 18-29. Fairfax (Virginia), 2-4 November 1994
12. G. H. Kim, E. H. Spafford: Experiences with Tripwire: Using integrity checkers for intrusion detection. In Systems Administration, Networking and Security Conference III. USENIX, April 1994.
13. C. Ko, T. Fraser, L. Badger, D. Klipatrick: Detecting and Countering System Intrusions Using Software Wrappers. Proceedings of the 9th USENIX Security Symposium. Denver, Colorado, August 14-17, 2000.
14. J. Linn: Privacy Enhancement for Internet Electronic Mail. PKIX Working Group, RFC1421, February, 1993.
15. RSA Laboratories: PKCS7 Cryptographic Message Syntax Standard. ftp://www.rsasecurity.com, November 1, 1993
16. S. McCanne, V. Jacobson: The BSD Packet Filter: a new architecture for user-level packet capture. Proceedings of the 1993 winter USENIX conference, pp. 259-269. San Diego CA, 1993.
17. Sun Microsystems Corporation: Java Code Signing, http://java.sun.com/security/codesign, 1996
18. R. Housley, W. Ford, W. Polk, and D. Solo: Internet X509 Public Key Infrastructure: Certificate and CRL Profile. Network Working Group, RFC 3280, April, 2002
19. RSA Laboratories: RSAREF: A Cryptographic Toolkit for Privacy-Enhanced Mail. http://wwv.aus.rsa.com, 1994
20. SD: Linux on-the-fly kernel patching without LKM. Phrack issue 58, December 2001
21. Sun Microsystems: JavaTM Security Evolution and Concepts. Technical Articles. http://developer.java.sun.com/
22. D. Stinson: Cryptography: Theory and Practice. CRC Press.