Replayer: Automatic protocol replay by binary analysis

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2006, Pages 311-321

  Newsome, James ^a   Brumley, David ^a   Franklin, Jason ^a   Song, Dawn ^a  

^a CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

Application protocol replay; Weakest pre condition

Indexed keywords

BINARY CODES; HEURISTIC METHODS; NETWORK SECURITY; PROBLEM SOLVING; SOFTWARE PROTOTYPING;

APPLICATION PROTOCOL REPLAY; WEAKEST PRE-CONDITION;

NETWORK PROTOCOLS;

EID: 34547349153     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1180405.1180444     Document Type: Conference Paper

References (26)

1. Cybertrace. http://www.cybertrace.com/ctids.html.
2. Tcpreplay: Pcap editing and replay tools for *NIX. http://tcpreplay.sourceforge.net.
3. David F. Bacon and Seth Copen. Goldstein. Hardware-assisted replay of multiprocessor programs. In Proceedings of the ACM/ONR Workshop on Parallel and Distributed Debugging, May 1991.
4. G. Balakrishnan and T. Reps. Analyzing memory accesses in x86 executables. In Proc. Int. Conf. on Compiler Construction, 2004.
5. P Bosch, A Carloganu, and D Etiemble. Complete x86 instruction trace generation from hardware bus collect. In 23rd IEEE EUROMICRO Conference, 1997.
6. D. Brumley, J. Newsome, D. Song, H. Wang, and S. Jha. Towards automatic generation of vulnerability-based signatures. In Proceedings of the IEEE Symposium on Security and Privacy (Oakland), 2006.
7. Yu-Chung Cheng, Urs Hoelzle, Neal Cardwell, Stefan Savage, and Geoffrey M. Voelker. Monkey see, monkey do: A tool for tcp tracing and replaying. In Proceedings of the 2004 USENIX Annual Technical Conference, June 2004.
8. Weidong Cui, Vern Paxson, Nicholas C. Weaver, and Randy H. Katz. Protocol-independent adaptive replay of application, dialog. In Proceedings of the 13th Annual Network and Distributed System Security Symposium, February 2006.
9. D.L. Detlefs, K. Rustan M. Leino, G. Nelson, and J.B. Saxe. Extended static checking. Technical Report 159, Compaq Systems Research Center, December 1998.
10. E. W. Dijkstra. A Discipline of Programming. Prentice Hall, Englewood Cliffs, NJ, 1976.
11. George W. Dunlap, Samuel T. King, Sukru Cinar, Murtaza Basrai, and Peter M. Chen. ReVirt: Enabling intrusion analysis through. virtual-machine logging and replay. In Proceedings of the 2002 Symposium on Operating Systems Design and Implementation (OSDI), December 2002.
12. M. D. Ernest, J. Cockrell, W. G. Griswold, and D. Notkin. Dynamically discovering likely program invariants to support program evoluation. IEEE Transactions on Software Engineering, 27(2), Feb 2001.
13. C. Flanagan, and J.B. Saxe. Avoiding exponential explosion: Generating compact verification conditions. In Proceedings of the 28th ACM Symposium on the Principles of Programming Languages (POPL), 2001.
14. Vijay Ganesh and David L. Dill. System description of STP. http://www.csl.sri.com/users/demoura/smt-comp/descriptions/stp.ps, August 2006.
15. David Gries, editor. Programming in the 1990's: An Introduction to the calculation of programs. Springer Verlag, 1990.
16. Samuel T. King, George W. Dunlap, and Peter M. Chen. Debugging operating systems with time-traveling virtual machines. In Proceedings of the 2005 USENIX Annual Technical Conference, April 2005.
17. T. J. LeBlanc and J. M. Mellor-Crummey. Debugging parallel programs with instant replay. IEEE Transactions on Computers, 36(4):471-482, 1987.
18. K. Rustan M. Leino and Francesco Logozzo. Loop invariants on demand. In Asian Symposium on Programming Languages and Systems APLAS, 2005.
19. Chi-Keung Luk, Robert Cohn, Robert Muth, Harish Patil, Artur Klauser, Geoff Lowney, Steven Wallace, Vijay Janapa Reddi, and Kim. Hazelwood. Pin: Building customized program analysis tools with dynamic instrumentation. In Proc. of 2005 Programming Language Design and Implementation (PLDI) conference, june 2005.
20. Nicholas Nethercote and Julian Seward. Valgrind: A program supervision framework. In Proceedings of the Third Workshop on Runtime Verification (RV'03), Boulder, Colorado, USA, July 2003.
21. R. Pang, V. Yegneswaran, P. Barford, V. Paxson, and L. Peterson. Characteristics of internet background radiation. In Proceedings of Internet Measurement Conference, October 2004.
22. Niels Provos. A virtual honeypot framework. In Proceedings of the 13th USENIX Security Symposium, August 2004.
23. M. Russinovich and B. Cagswell. Replay for concurrent non-deterministic shared-memory applications. In Proceedings of the 1996 Conference on Programming Language Design and Implementation, May 1996.
24. P. A. Sandon, Y.C. Liao, T.E. Cook, D.M. Schultz, and P Martin de Nicolas. Nstrace: A bus-driven instruction trace tool for powerpc microprocessors. IBM Journal of Research and Development, 41(3), 1997.
25. S. Srinivasan, S. Kandula, C. Andrews, and Y. Zhou. Flashback: A light-weight rollback and deterministic replay extension for software debugging. In Proceedings of the 2004 USENIX Annual Technical Conference, June 2004.
26. A. Turner. Flowreplay design notes. http://www.synfin.net/papers/ flowreplay.pdf.