Server protection through dynamic patching

Proceedings - 11th Pacific Rim International Symposium on Dependable Computing, PRDC 2005

Volumn 2005, Issue , 2005, Pages 343-349

  Loriant, Nicolas ^a   Ségura Devillechaise, Marc ^a   Menaud, Jean Marc ^a  

^a INSTITUT DE RECHERCHE EN COMMUNICATIONS ET CYBERNÉTIQUE DE NANTES   (France)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SOFTWARE; COMPUTER WORMS; CONSTRAINT THEORY; INTERNET; PUBLIC KEY CRYPTOGRAPHY; SERVERS;

DEBIAN SECURITY; DYNAMIC PATCHING; JUST-IN-TIME PROTECTION; RUNTIME INJECTION;

SECURITY OF DATA;

EID: 33847250029     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/PRDC.2005.56     Document Type: Conference Paper

References (14)

1. S. Chen, J. Xu, N. Nakka, Z. Kalbarczyk, and R. K. Iyer. Defeating Memory Corruption Attacks via Pointer Taintedness Detection. In Proceedings of the International Conference on Dependable Systems and Networks (DSN), pages 378-387, Yokohama, Japan, June 2005. IEEE Computer Society.
2. C. Cowan, M. Barringer, S. Beattie, G. Kroah-Hartman, M. Frantzen, and J. Lokier. FormatGuard: Automatic Protection from printf Format String Vulnerabilities. In Proceedings of the Tenth Usenix Security Symposium, Washington, DC, USA, Aug. 2001. USENIX.
3. R. Douence, T. Fritz, N. Loriant, J.-M. Menaud, M. Ségura- Devillechaise, and M. Südholt. An expressive aspect language for system applications with Arachne. In Proceedings of the Fourth International Conference on Aspect-Oriented Software Development (AOSD), pages 27-38, Chicago, IL, USA, Mar. 2005. ACM Press.
4. M. Goto. CINT, The C/C++Interpreter, http://root.cern.ch/root/cint.html.
5. R. W. M. Jones and P. H. J. Kelly. Backward-compatible bounds checking for arrays and pointers in C programs. In Proceedings of the 3rd International Workshop on Automated and Algorithmic Debugging (AADEBUG), pages 13-26, Linköping, Sweden, May 1997.
6. D. Kegel, dkftpbench. http://www.kegel.com/dkftpbench/.
7. N. Loriant, M. Ségura-Devillechaise, and J.-M. Menaud. Software Security Patches - Audit, Deployment and Hot Update. In Proceedings of the Fourth AOSD Workshop on Aspects, Components, and Patterns for Infrastructure Software (ACP4IS), pages 25-29, Chicago, IL, USA, Mar. 2005.
8. Nergal. The advanced return-into-lib(c) exploits: PaX case study. Phrack, 11(58), Dec 2001.
9. PaX Project. Address space layout randomization, Mar 2003. http://pageexec.virtualave.net/docs/aslr.txt.
10. D. Pescovitz. Monster in a box. Wired, 8(12), Dec. 2000.
11. M. Rinard, C. Cadar, D. Dumitran, D. M. Roy, T. Leu, and W. S. Beebee Jr. Enchancing Server Availability and Security through Failure-Oblivious Computing. In Proceedings of the Sixth Symposium on Operating Systems Design and Implementation (OSDI), pages 303-316, San Francisco, CA, Dec. 2004. USENIX.
12. C. Shannon and D. Moore. The spread of the witty worm. IEEE Security & Privacy, 2(4):46-50, July/Aug. 2004.
13. Solar Designer. Getting around non-executable stack (and fix). Bugtraq Mailing List, Aug 1997.
14. Sun Microsystems Inc. The Java HotSpot™ Technology. http://Java.sun.com/products/hotspot/.