Efficient online validation with delta execution

ACM SIGPLAN Notices

Volumn 44, Issue 3, 2009, Pages 193-204

  Tucek, Joseph ^a   Xiong, Weiwei ^a   Zhou, Yuanyuan ^a  

^a University of Illinois at Urbana Champaign   (United States)

Author keywords

Delta Execution; Patch Validation; Testing

Indexed keywords

APPLICATION PROGRAMS; TESTING;

DELTA EXECUTION; DYNAMIC INSTRUMENTATION; PATCH VALIDATION; SECURITY PATCHES; SERVER APPLICATIONS; SERVER PROGRAMS; SIDE-BY-SIDE EXECUTION; SOFTWARE SYSTEMS;

RANDOM NUMBER GENERATION;

EID: 67650796119     PISSN: 15232867     EISSN: None     Source Type: Journal    
DOI: 10.1145/1508284.1508267     Document Type: Conference Paper

References (25)

1. Brenda S. Baker, Udi Manber, and Robert Muth. Compressing differences of executable code. In ACM SIGPLAN 1999 Workshop on Compiler Support for System Software (WCSSS'99), May 1999.
2. Rob Barrett, Paul P. Maglio, Eser Kandogan, and John Bailey. Usable autonomic computing systems: The administrator's perspective. In Proceedings of the First International Conference on Autonomic Computing (ICAC'04), pages 18-26. IEEE Computer Society, 2004.
3. Steve Beattie, Seth Arnold, Crispin Cowan, Perry Wagle, Chris Wright, and Adam Shostack. Timing the application of security patches for optimal uptime, 2002. In Proceedings of the 16th USENIX Systems Administration Conference (LISA'02), 2002.
4. Hilary K. Browne, William A. Arbaugh, John McHugh, and William L. Fithen. A trend analysis of exploitations. In SP '01: Proceedings of the 2001 IEEE Symposium on Security and Privacy, page 214, Washington, DC, USA, 2001. IEEE Computer Society.
5. CERT. Cert statistics. http://www.cert.org/ stats/ cert stats.html.
6. Jonathan E. Cook and Jeffrey A. Dage. Highly reliable upgrading of components. In International Conference on Software Engineering, pages 203-212, 1999.
7. Crispin Cowan, Heather Hinton, Calton Pu, and Jonathan Walpole. The cracker patch choice: An analysis of post hoc security techniques. In Proceedings of the National Information Systems Security Conference (NISSC), Oct 2000.
8. Marcelo d'Amorim, Steven Lauterburg, and Darko Marinov. Delta execution for efficient state-space exploration of object-oriented programds. In ISSTA'07: Proceedings of the 2007 International Symposium on Software Testing and Analysis, 2007.
9. Michael Hicks, Jonathan T. Moore, and Scott Nettles. Dynamic software updating. In PLDI '01: Proceedings of the ACM SIGPLAN 2001 conference on Programming language design and implementation, pages 13-23, New York, NY, USA, 2001. ACM.
10. Ashlesha Joshi, Samuel T. King, George W. Dunlap, and Peter M. Chen. Detecting past and present intrusions through vulnerability-specific predicates. SIGOPS Oper. Syst. Rev., 39 (5):91-104, 2005.
11. David E. Lowell, Yasushi Saito, and Eileen J. Samberg. Devirtualizable virtual machines enabling general, single-node, online maintenance. ASPLOS '04, 39(11):211-223, 2004.
12. Chi-Keung Luk, Robert Cohn, Robert Muth, Harish Patil, Artur Klauser, Geoff Lowney, Steven Wallace a nd Vijay Janapa Reddi, and Kim Hazelwood. Pin: Building customized program analysis tools with dynamic instrumentation. In PLDI, 2005.
13. Kristis Makris and Kyung Dong Ryu. Dynamic and adaptive updates of non-quiescent subsystems in commodity operating system kernels. In EuroSys '07: Proceedings of the ACM SIGOPS/EuroSys European Conference on Computer Systems 2007, pages 327-340, New York, NY, USA, 2007. ACM.
14. Evan Marcus and Hal Stern. Blueprints for High Availability. John Willey & Sons, 2000.
15. Paul McDougall. Microsoft pulls buggy Windows Vista SP1 files. InformationWeek, Feb 2008. http://www.informationweek.com/ story/ showArticle.jhtml?articleID=206800819.
16. Microsoft. Revamping the microsoft security bulletin release process, Oct 2003. http://www.microsoft.com/ technet/ security/ bulletin/ revsbwp.mspx.
17. Kiran Nagaraja, Fábio Oliveira, Ricardo Bianchini, Richard P. Martin, and Thu D. Nguyen. Understanding and dealing with operator mistakes in internet services. In OSDI, 2004.
18. National Institute of Standards and Technlogy (NIST), Department of Commerce. Software errors cost U.S. economy $59.5 billion annually. NIST News Release 2002-10, 2002.
19. Rob Pegoraro. Apple updates Leopard-again. The Washington Post, Feb 2008. http://blog.washingtonpost.com/ fasterforward/ 2008/ 02/ apple-updates- leopardagain.html.
20. Eric Rescorla. Security holes... who cares? In Proceedings of the 12th USENIX Security Conference, Aug 2003.
21. Mark E. Segal and Ophir Frieder. On-the-fly program modification: Systems for dynamic updating. IEEE Softw., 10(2):53-65, 1993.
22. Stelios Sidiroglou, Sotiris Ioannidis, and Angelos D. Keromytis. Band-aid patching. In HotDep'07: Proceedings of the 3rd Workshop on Hot Topics in System Dependability. USENIX Association, 2007.
23. Linus Torvalds. Re: [rant] linux-irda status. Linux Kernel Mailing List, November 2000.
24. Zheng Wang and Ken Pierce. Bmat - a binary matching tool for stale profile propagation. Instruction-Level Parallelism, 2000.
25. Yuanyuan Zhou, Darko Marinov, William Sanders, Craig Zilles, Marcelo d'Amorim, Steven Lauterburg, Ryan M. Lefever, and Joseph Tucek. Delta execution for software reliability. In HotDep'07: Proceedings of the 3rd Workshop on Hot Topics in System Dependability. USENIX Association, 2007.