Towards a self-managing software patching process using black-box persistent-state manifests

Proceedings - International Conference on Autonomic Computing

Volumn , Issue , 2004, Pages 106-113

  Dunagan, John ^a   Roussev, Roussi ^a   Daniels, Brad ^a   Johnson, Aaron ^a   Verbowski, Chad ^a   Wang, Yi Min ^a  

^a MICROSOFT RESEARCH   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

BLACK BOX; COMPUTER SYSTEMS NETWORK (CSN); DYNAMIC LIBRARIES; SOFTWARE PATCHING;

AUTOMATION; COMPUTER NETWORKS; COMPUTER SYSTEMS; INTERNET; RISK ASSESSMENT; SERVERS; XML;

COMPUTER SOFTWARE;

EID: 4544285425     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICAC.2004.1301353     Document Type: Conference Paper

References (21)

1. [BAC03] S.Beatie, S.Arnold, C. Cowan, P. Wagle and C. Wright, "Timing the Application of Security Patches for Optimal Uptime," in Proc. Usenix LISA, 2002
2. [CKF+02] M. Chen, E. Kiciman, E. Fratkin, A. Fox, and E. Brewer, "Pinpoint: Problem Determination in Large, Dynamic, Internet Services," in Proc. Int. Conf. on Dependable Systems and Networks (IPDS Track), 2002.
3. [DEB] Debian GNU/Linux, http://www.debian.org.
4. [DLS02] M. Das, S. Lerner, and M. Seigle, "ESP: Path-Sensitive Program Verification in Polynomial Time," in Proc. ACM SIGPLAN Conf. on Programming Language Design and Implementation (PLDI), June 2002.
5. [F96] D. Farmer, "Shall We Dust Moscow? Security Survey of Key Internet Hosts and Various Semi-Relevant Reflections", http://www.fish.com/ survey.
6. [HD02] J. Hart and J. D'Amelia, "An Analysis of RPM Validation Drift," in Proc. Usenix LISA, 2002.
7. [ITIL] ITIL Configuration Management Database, http://www.itil-itsm- world.com/itil-1.htm.
8. [KE02] A. Keller and C. Ensel, "An Approach for Managing Service Dependencies with XML and the Resource Description Framework," in Journal of Network and Systems Management, Vol. 10, No. 2, June 2002.
9. [LC01] M. Larsson and I. Crnkovic, "Configuration Management for Component-based Systems," in Proc. Int. Conf. on Software Engineering (ICSE), May 2001.
10. [MBSA] Microsoft Baseline Security Analyzer, www.microsoft.com/technet/ security/tools/mbsahome.mspx.
11. [MOF] Microsoft Operations Framework, http://www.microsoft.com/mof.
12. [P03] Richard Pethia, "Congressional Testimony: Attacks on the Internet in 2003", http://usinfo.state.gov/journals/itgic/1103/ijge/gj11a. htm.
13. [RPM97] E. Bailey, Maximum RPM, 1997.
14. [SC01] Y. Sun and A. L. Couch, "Global Analysis of Dynamic Library Dependencies," in Proc. LISA, 2001.
15. [SLA] The Slackware Linux Project, http://www.slackware.com.
16. [SMS] Microsoft SMS, www.microsoft.com/smserver.
17. [SR00] D. A. Solomon and M. Russinovich, "Inside Microsoft Windows 2000," Microsoft Press, 3rd edition, Sep. 2000.
18. [Tiv] Tivoli, http://www.tivoli.com.
19. [WRV03] Y. M. Wang, R. Roussev, C. Verbowski, A. Johnson, and D. Ladd, "AskStrider: What Has Changed on My Machine Lately?" Microsoft Research Technical Report MSR-TR-2004-03.
20. [WU] Microsoft Windows Update, http://windowsupdate.microsoft.com.
21. [WVD03] Y. M. Wang, C. Verbowski, J. Dunagan, Y. Chen, H. J. Wang, C. Yuan, and Z. Zhang, "STRIDER: A Black-box, State-based Approach to Change and Configuration Management and Support," in Proc. Usenix LISA (Best Paper), pp. 159-172, Oct. 2003.