Samurai: Protecting critical data in unsafe languages

EuroSys'08 - Proceedings of the EuroSys 2008 Conference

Volumn , Issue , 2008, Pages 219-232

  Pattabiraman, Karthik ^a   Grover, Vinod ^b   Zorn, Benjamin G ^c  

^a UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

^b NVIDIA   (United States)

^c MICROSOFT RESEARCH   (United States)

Author keywords

Critical memory; Error recovery; Memory safety

Indexed keywords

CORRUPTED DATUM; CRITICAL DATUM; CRITICAL MEMORY; DATA-CENTRIC; ERROR RECOVERY; MEMORY ALLOCATOR; MEMORY CORRUPTIONS; MEMORY ERRORS; MEMORY MODELS; MEMORY OPERATIONS; MEMORY SAFETY; PROBABILISTIC GUARANTEES; PROGRAM EXECUTIONS; RUN-TIME SYSTEMS; THIRD PARTIES; WEB SERVERS;

DATA STRUCTURES; DIGITAL LIBRARIES; EMBEDDED SYSTEMS; ERROR CORRECTION; ERRORS; FAULT TOLERANCE; FAULT TOLERANT COMPUTER SYSTEMS; FORWARD ERROR CORRECTION; INFORMATION THEORY; LIBRARIES; LINGUISTICS; QUALITY ASSURANCE; RELIABILITY; WEB SERVICES;

COMPUTER SOFTWARE;

EID: 59249096511     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1352592.1352616     Document Type: Conference Paper

References (34)

1. Abadi, Budiu, Erlingsson, and Ligatti, "Control-flow integrity: Principles, implementations, and applications," in CCS'05, 2005.
2. S. Abeghyan, "Multi-threaded server class with example of http server." [Online], Available: http://www.codeproject.com/mternet/mhttpsrv. asp
3. M. Baker and M. Sullivan, "The recovery box: Using fast recovery to provide high availability in the UNIX environment," in USENIX'92, 1992, pp. 31-44.
4. E. Berger, B. Zorn, and K. McKinley, "Reconsidering custom memory allocation," in Proceedings of the Conference on Object-Oriented Programming: Systems, Languages, and Applications (OOPSLA) 2002., 2002.
5. E. D. Berger and B. G. Zorn, "DieHard: probabilistic memory safetv for unsafe languages," in PLDI'06. New York, NY, USA: ACM Press, 2006, pp. 158-168.
6. E. D. Berger, B. G. Zorn, and K. S. McKinley, "Composing high-performance memory allocators," in PLDF01, 2001, pp. 114-124.
7. J. D. Bright and G. F. Sullivan, "On-line error monitoring for several data structures," in FTCS, 1995, pp. 392-401.
8. J. Condit, M. Harren, S. McPeak, G. C. Necula, and W. Weimer, "CCured in the real world," in PLDI. ACM, 2003, pp. 232-244.
9. M. Corporation, "Phoenix compiler infrastructure." [Online]. Available: http://research.microsoft.com/phoenix
10. B. Demsky and M. C. Rinard, "Goal-directed reasoning for specification-based data structure repair," IEEE Trans. Software Eng, vol. 32, no. 12, pp. 931-951, 2006.
11. D. Dhurjati and V. S. Adve, "Backwards-compatible array bounds checking for C with very low overhead," in ICSE'06. ACM, 2006, pp. 162-171.
12. R. Hastings and B. Joyce, "Fast detection of memory-leaks and access errors," in Proceedings of the Winter'92 USENIX conference, 1992, pp. 125-136.
13. J. L. Herniing, "SPEC CPU2000: measuring CPU performance in the new millennium," IEEE Computer, vol. 33, no. 7, pp. 28-35, 2000.
14. Y. Huang and C. Kintala, "Software fault-tolerance in the application layer," in Software Fault Tolerance, M. R. Lyu, Ed, John Wiley & sons, 1995, pp. 231-248.
15. T. Jim, J. G. Morrisett, D. Grossman, M. W. Hicks, J. Cheney, and Y. Wang, "Cyclone: A safe dialect of C," in USENIX'02, June 2002, pp. 275-288.
16. R. W. M. Jones and P. H. J. Kelly, "Backwards-compatible bounds checking for arrays and pointers in C programs," in AADEBUG, 1997, pp. 13-26.
17. P.-H. Kamp, "Malloc(3) revisited," in FreeNIX Track: USENIX'98, 1998, pp. 193-198.
18. K. Kant and A. Ravichandran, "Synthesizing robust data STructures - an introduction," IEEE Trans. Computers, vol. 39, no. 2, pp. 161-173, 1990.
19. M. Kempf, "Smashing the heap for fun and profit." [Online]. Available: http://doc.bughunter.net/bufferoverflow/heap-corraption.html
20. M. Kharbutli, X. Jiang, Y. Solihin, G. Venkataramani, and M. Prvulovic, "Comprehensively and efficiently protecting the heap." in ASPLOS'06. ACM Press, 2006, pp. 207-218.
21. C. Kolb, "Rayshade graphics program." [Online]. Available: http://graphics.stanford.edu/c̃ek/rayshade
22. D. R. Musser and A. Saini, The STL Tutorial and Reference Guide: C++ Programming with the Standard Template Library. Redwood City, CA, USA: Addison Wesley Longman Publishing Co., Inc., 1995.
23. G. C. Necula, J. Condit, M. Harren, S. McPeak, and W. Weimer, "CCured: type-safe retrofitting of legacy software," ACM Trans. Program. Lang. Syst. vol. 27. no. 3, pp. 477-526, 2005.
24. N. Nethercote and J. Seward, "Valgrind: A program supervision framework," Electr. Notes Theor. Comput. Set, vol. 89, no. 2, 2003.
25. H. Packard, "Stl - hewlett-packard's downloadable standard template library." [Online]. Available: ftp://butler.hpl.hp.com/stl
26. F. Qin, J. Tucek, J. Sundaresan, and Y. Zhou, "Rx: treating bugs as allergies - a safe method to survive software failures," in SOSP'05, A. Herbert and K. P. Birman, Eds. ACM, 2005, pp. 235-248.
27. M. C. Rinard, C. Cadar, D. Dumitran, D. M. Roy, and T. Leu, "A dynamic technique for eliminating buffer overflow vulnerabilities (and other memorv errors)," in ACS AC. IEEE Computer Society, 2004, pp. 82-90.
28. A. Rogers, M. Carlisle, J. Reppy, and L. Hendren, "Supporting dynamic data structures on distributed memory machines," ACM TOPLAS, vol. 13, 1995.
29. O. Ruwase and M. Lam. "A practical dvnamic buffer overflow detector," in NDSS'04, Feb. 2004, pp. 159-169.
30. C. C. E. R. Team, "Secure coding." [Online]. Available: http://www.cert.org/secure-coding
31. J. M. Voas and G. McGraw, Software fault injection: inoculating programs against errors. New York, NY, USA: John Wiley & Sons, Inc., 1997.
32. R. Wahbe, S. Lucco, T. E. Anderson, and S. L. Graham, "Efficient software-based fault isolation," in SOSP, 1993, pp. 203-216.
33. P. R. Wilson, M. S. Johnstone, M. Neely, and D. Boles, "Dynamic storage allocation: A survey and critical review," in IWMM, 1995.
34. F. Zhou, J. Condit, Z., Anderson, I. Bagrak, R. Ennals, M. Harren, G. Necula, and E. Brewer, "Safedrive: Safe and recoverable extensions using language-based techniques," in OSDI'06. Usenix, 2006.