ASSURE: Automatic software self-healing using REscue points

International Conference on Architectural Support for Programming Languages and Operating Systems - ASPLOS

Volumn , Issue , 2009, Pages 37-48

  Sidiroglou, Stelios ^a   Laadan, Oren ^a   Perez, Carlos R ^a   Viennot, Nicolas ^a   Nieh, Jason ^a   Keromytis, Angelos D ^a  

^a Columbia University ^*  (United States)

Author keywords

Binary patching; Checkpoint restart; Error recovery; Reliable software; Software self healing

Indexed keywords

APPLICATION PROGRAMS; AVAILABILITY; CODES (SYMBOLS); COMPUTER OPERATING SYSTEMS; COMPUTER SYSTEM RECOVERY; ERRORS; RECOVERY;

BINARY PATCHING; CHECKPOINT RESTART; COORDINATED CHECKPOINTS; MULTI- THREADED APPLICATIONS; OPERATING SYSTEM KERNEL; SELF-HEALING; SERVER APPLICATIONS; SYSTEM AVAILABILITY;

PROGRAM DEBUGGING;

EID: 67650079927     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1508244.1508250     Document Type: Conference Paper

References (32)

1. M. Abadi, M. Budiu, U. Erlingsson, and J. Ligatti. Control- Flow Integrity. In Proceedings of the 12th ACM Conference on Computer and Communications Security (CCS 2005), pages 340-353, Sept. 2005.
2. J. Boyd. Patterns of Conflict. Unpublished Briefing, http: //www.d-n-i.net/boyd/pdf/poc.pdf, Dec. 1986.
3. T. C. Bressoud and F. B. Schneider. Hypervisor-Based Fault Tolerance. In Proceedings of the 15th ACM Symposium on Operating Systems Principles (SOSP 1995), pages 1-11, Dec. 1995.
4. D. Brumley, H. Wang, S. Jha, and D. Song. Creating Vulnerability Signatures Using Weakest Preconditions. In Proceedings of the 20th IEEE Computer Security Foundations Symposium, pages 311-325, July 2007. (Pubitemid 47554222)
5. B. Buck and J. K. Hollingsworth. An API For Runtime Code Patching. International Journal of High Performance Computing Applications, 14(4):317-329, Nov. 2000. (Pubitemid 32024200)
6. G. Candea and A. Fox. Crash-Only Software. In Proceedings of the 9th Workshop on Hot Topics in Operating Systems (HotOS IX), pages 12-20, May 2003.
7. S. Chandra. An Evaluation of the Recovery-Related Properties of Software Faults. PhD thesis, University of Michigan, Sept. 2000.
8. M. Costa, J. Crowcroft, M. Castro, A. Rowstron, L. Zhou, L. Zhang, and P. Barham. Vigilante: End-To-End Containment of InternetWorms. In Proceedings of the 20th ACM Symposium on Operating Systems Principles (SOSP 2005), pages 133-147, Dec. 2005.
9. B. Demsky and M. Rinard. Automatic Detection and Repair of Errors In Data Structures. In Proceedings of the 18th Annual ACM SIGPLAN Conference on Object-Oriented Programing, Systems, Languages, and Applications (OOPSLA 2003), pages 78-95, Oct. 2003.
10. J. Etoh. GCC Extension for Protecting Ppplications from Stack-smashing Attacks. http://www.trl.ibm.com/ projects/security/ssp/.
11. S. T. King, G. W. Dunlap, and P. M. Chen. Debugging Operating Systems With Time-Traveling Virtual Machines. In Proceedings of the 2005 USENIX Annual Technical Conference (USENIX 2005), pages 1-15, Apr. 2005.
12. V. Kiriansky, D. Bruening, and S. P. Amarasinghe. Secure Execution Via Program Shepherding. In Proceedings of the 11th USENIX Security Symposium, pages 191-206, Aug. 2002.
13. N. Kolettis and N. D. Fulton. Software Rejuvenation: Analysis, Module and Applications. In Proceedings of the 25th International Symposium on Fault-Tolerant Computing (FTCS- 25), pages 381-395, June 1995.
14. O. Laadan and J. Nieh. Transparent Checkpoint-Restart of Multiple Processes on Commodity Operating Systems. In Proceedings of the 2007 USENIX Annual Technical Conference (USENIX 2007), pages 323-336, June 2007.
15. B. P. Miller, L. Fredriksen, and B. So. An Empirical Study of the Reliability of UNIX Utilities. Communications of the ACM, 33(12):32-44, Dec. 1990. (Pubitemid 21731525)
16. J. Newsome, D. Brumley, and D. Song. Vulnerability-Specific Execution Filtering for Exploit Prevention on Commodity Software. In Proceedings of the 13th Annual Symposium on Network and Distributed System Security (NDSS 2006), pages 1-15, Feb. 2006.
17. M. Norton and D. Roelker. Snort 2.0 Protocol Flow Analyzer. Sourcefire White Paper, Apr. 2004.
18. National Vulnerability Database. http://nvd.nist.gov/ statistics.cfm, April 2006.
19. S. Osman, D. Subhraveti, G. Su, and J. Nieh. The Design and Implementation of Zap: A System For Migrating Computing Environments. In Proceedings of the 5th Symposium on Operating Systems Design and Implementation (OSDI 2002), pages 361-376, Dec. 2002.
20. PaX Team. Address Space Layout Randomization, Mar. 2003. http://pax.grsecurity.net/docs/aslr.txt.
21. V. Paxson. Bro: A System For Detecting Network Intruders In Real-Time. Computer Networks, 31(23-24):2435-2463, Dec. 1999. (Pubitemid 30869661)
22. F. Qin, J. Tucek, J. Sundaresan, and Y. Zhou. Rx: Treating Bugs As Allergies-A Safe Method To Survive Software Failures. In Proceedings of the 20th ACM Symposium on Operating Systems Principles (SOSP 2005), pages 235-248, Oct. 2005. (Pubitemid 44892216)
23. E. Rescorla. Security Holes... Who Cares? In Proceedings of the 12th USENIX Security Symposium, pages 6-20, Aug. 2003.
24. M. Rinard. Acceptability-Oriented Computing. In Companion of the 18th Annual ACM SIGPLAN Conference on Object- Oriented Programming, Systems, Languages, and Applications (OOPSLA 2003), pages 221-239, Oct. 2003.
25. M. Rinard, C. Cadar, D. Dumitran, D. M. Roy, T. Leu, and J. William S. Beebee. Enhancing Server Availability and Security Through Failure-Oblivious Computing. In Proceedings of the 6th Symposium on Operating Systems Design and Implementation (OSDI 2004), pages 303-316, Dec. 2004.
26. S. Sidiroglou, Y. Giovanidis, and A. Keromytis. A Dynamic Mechanism For Recovery From Buffer Overflow Attacks. In Proceedings of the 8th Information Security Conference (ISC 2005), pages 1-15, Sept. 2005.
27. S. Sidiroglou, M. E. Locasto, S. W. Boyd, and A. D. Keromytis. Building A Reactive Immune System For Software Services. In Proceedings of the 2005 USENIX Annual Technical Conference (USENIX 2005), pages 149-161, Apr. 2005.
28. Y. Song, M. E. Locasto, A. Stavrou, A. D. Keromytis, and S. J. Stolfo. On the Infeasibility of Modeling Polymorphic Shellcode. In Proceedings of the 14th ACM Conference on Computer and Communications Security (CCS 2007), pages 541-551, Oct. 2007.
29. M. Sullivan and R. Chillarege. Software Defects and Their Impact on System Availability-A Study of Field Failures In Operating Systems. In Proceedings of the 21st International Symposium on Fault-Tolerant Computing (FTCS-21), pages 2-9, June 1991. (Pubitemid 21704526)
30. Symantec. Internet Security Threat Report. http://www. symantec.com/enterprise/threatreport/index.jsp.
31. J. Tucek, J. Newsome, S. Lu, C. Huang, S. Xanthos, D. Brumley, Y. Zhou, and D. Song. Sweeper: A Lightweight End-To- End System For Defending Against Fast Worms. In Proceedings of the 2nd European Conference on Computer Systems (EuroSys 2007), pages 115-128, Mar. 2007. (Pubitemid 47281579)
32. H. J.Wang, C. Guo, D. R. Simon, and A. Zugenmaier. Shield: Vulnerability-Driven Network Filters For Preventing Known Vulnerability Exploits. In Proceedings of the 2004 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications (SIGCOMM 2004), pages 193-204, Aug. 2004. (Pubitemid 40954880)