Efficient online validation with delta execution

International Conference on Architectural Support for Programming Languages and Operating Systems - ASPLOS

Volumn , Issue , 2009, Pages 193-204

  Tucek, Joseph ^a   Xiong, Weiwei ^a   Zhou, Yuanyuan ^a  

^a University of Illinois at Urbana Champaign   (United States)

Author keywords

Delta Execution; Patch Validation; Testing

Indexed keywords

APPLICATION PROGRAMS; OBJECT ORIENTED PROGRAMMING; RANDOM NUMBER GENERATION; TESTING;

DELTA EXECUTION; DYNAMIC INSTRUMENTATION; PATCH VALIDATION; SECURITY PATCHES; SERVER APPLICATIONS; SERVER PROGRAMS; SIDE-BY-SIDE EXECUTION; SOFTWARE SYSTEMS;

PROGRAM DEBUGGING;

EID: 67650079915     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1508244.1508267     Document Type: Conference Paper

References (25)

1. Brenda S. Baker, Udi Manber, and Robert Muth. Compressing differences of executable code. In ACM SIGPLAN 1999 Workshop on Compiler Support for System Software (WCSSS'99), May 1999.
2. Rob Barrett, Paul P. Maglio, Eser Kandogan, and John Bailey. Usable autonomic computing systems: The administrator's perspective. In Proceedings of the First International Conference on Autonomic Computing (ICAC'04), pages 18-26. IEEE Computer Society, 2004.
3. Steve Beattie, Seth Arnold, Crispin Cowan, Perry Wagle, Chris Wright, and Adam Shostack. Timing the application of security patches for optimal uptime, 2002. In Proceedings of the 16th USENIX Systems Administration Conference (LISA'02), 2002.
4. Hilary K. Browne, William A. Arbaugh, John McHugh, and William L. Fithen. A trend analysis of exploitations. In SP'01: Proceedings of the 2001 IEEE Symposium on Security and Privacy, page 214, Washington, DC, USA, 2001. IEEE Computer Society. (Pubitemid 32882638)
5. CERT. Cert statistics. http://www.cert.org/ stats/ cert stats.html.
6. CERT. Cert statistics. http://www.cert.org/stats/certstats.html. Jonathan E. Cook and Jeffrey A. Dage. Highly reliable upgrading of components. In International Conference on Software Engineering, pages 203-212, 1999.
7. Crispin Cowan, Heather Hinton, Calton Pu, and Jonathan Walpole. The cracker patch choice: An analysis of post hoc security techniques. In Proceedings of the National Information Systems Security Conference (NISSC), Oct 2000.
8. Marcelo d'Amorim, Steven Lauterburg, and Darko Marinov. Delta execution for efficient state-space exploration of object-oriented programds. In ISSTA'07: Proceedings of the 2007 International Symposium on Software Testing and Analysis, 2007. (Pubitemid 47317579)
9. Michael Hicks, Jonathan T. Moore, and Scott Nettles. Dynamic software updating. In PLDI'01: Proceedings of the ACM SIGPLAN 2001 conference on Programming language design and implementation, pages 13-23, New York, NY, USA, 2001. ACM. (Pubitemid 33723833)
10. Ashlesha Joshi, Samuel T. King, George W. Dunlap, and Peter M. Chen. Detecting past and present intrusions through vulnerability-specific predicates. SIGOPS Oper. Syst. Rev., 39 (5):91-104, 2005. (Pubitemid 44892207)
11. David E. Lowell, Yasushi Saito, and Eileen J. Samberg. Devirtualizable virtual machines enabling general, single-node, online maintenance. ASPLOS'04, 39(11):211-223, 2004. (Pubitemid 40163701)
12. Chi-Keung Luk, Robert Cohn, Robert Muth, Harish Patil, Artur Klauser, Geoff Lowney, Steven Wallace a nd Vijay Janapa Reddi, and Kim Hazelwood. Pin: Building customized program analysis tools with dynamic instrumentation. In PLDI, 2005. (Pubitemid 43185951)
13. Kristis Makris and Kyung Dong Ryu. Dynamic and adaptive updates of non-quiescent subsystems in commodity operating system kernels. In EuroSys'07: Proceedings of the ACM SIGOPS/EuroSys European Conference on Computer Systems 2007, pages 327-340, New York, NY, USA, 2007. ACM. (Pubitemid 47281593)
14. Evan Marcus and Hal Stern. Blueprints for High Availability. John Willey & Sons, 2000.
15. Paul McDougall. Microsoft pulls buggy Windows Vista SP1 files. InformationWeek, Feb 2008.http://www.informationweek.com/story/showArticle. jhtml?articleID=206800819.
16. Microsoft. Revamping the microsoft security bulletin release process, Oct 2003. http://www.microsoft.com/technet/security/bulletin/revsbwp.mspx.
17. Kiran Nagaraja, F́abio Oliveira, Ricardo Bianchini, Richard P. Martin, and Thu D. Nguyen. Understanding and dealing with operator mistakes in internet services. In OSDI, 2004.
18. National Institute of Standards and Technlogy (NIST), Department of Commerce. Software errors cost U.S. economy $59.5 billion annually. NIST News Release 2002-2010, 2002.
19. Rob Pegoraro. Apple updates Leopard-again. The Washington Post, Feb 2008. http://blog.washingtonpost.com/fasterforward/2008/02/apple-updates- leopardagain.html.
20. th USENIX Security Conference, Aug 2003.
21. Mark E. Segal and Ophir Frieder. On-the-fly program modification: Systems for dynamic updating. IEEE Softw., 10(2):53-65, 1993.
22. rd Workshop on Hot Topics in System Dependability. USENIX Association, 2007.
23. Linus Torvalds. Re: [rant] linux-irda status. Linux Kernel Mailing List, November 2000.
24. Zheng Wang and Ken Pierce. Bmat - a binary matching tool for stale profile propagation. Instruction-Level Parallelism, 2000. (Pubitemid 38973031)
25. rd Workshop on Hot Topics in System Dependability. USENIX Association, 2007.