Observation mechanism and cost model for tightly coupled asymmetric concurrency

5th International Conference on Systems, ICONS 2010

Volumn , Issue , 2010, Pages 158-163

  Seeger, Mark M ^a   Wolthusen, Stephen D ^b,c  

^a Center for Advanced Security Research   (Germany)

^b NORWEGIAN UNIVERSITY OF SCIENCE AND TECHNOLOGY   (Norway)

^c UNIVERSITY OF LONDON   (United Kingdom)

Author keywords

Asymmetric concurrency; Computational model; Intrusion detection; Memory observation

Indexed keywords

ASYMMETRIC CONCURRENCY; COMPUTATIONAL MODEL; CONCURRENT PROCESSING; COST MODELS; CURRENT COMPUTING; DETECTION MECHANISM; MALICIOUS CODES; MEMORY STATE; RESOURCE CONTENTION; SECOND ORDERS; SENSOR DATA; TIGHTLY-COUPLED;

DATA STRUCTURES; INDUSTRIAL RESEARCH;

INTRUSION DETECTION;

EID: 77953734121     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICONS.2010.34     Document Type: Conference Paper

References (19)

1. A. Moser, C. Kruegel, and E. Kirda, "Limits of Static Analysis for Malware Detection," in Proceedings of the 23rd Annual Computer Security Applications Conference (ACSAC 2007). Miami Beach, FL, USA: IEEE Press, Dec. 2007, pp. 421-430.
2. L. Cavallaro, P. Saxena, and R. Sekar, "On the Limits of Information Flow Techniques for Malware Analysis and Containment," in Proceedings of Detection of Intrusions and Malware, and Vulnerability Assessment (DIMVA 2008), ser. Lecture Notes in Computer Science, D. Zamboni, Ed., vol. 5137. Heidelberg, Germany: Springer-Verlag, Jul. 2008, pp. 143-163.
3. J. Oplinger and M. S. Lam, "Enhancing Software Reliability with Speculative Threads," in Proceedings of the 10th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS XIII), K. Gharachorloo, Ed. New York, NY, USA: ACM Press, Oct. 2002, pp. 184-196.
4. E. B. Nightingale, D. Peek, P. M. Chen, and J. Flinn, "Parallelizing Security Checks on Commodity Hardware," in Proceedings of the 13th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS XIII), S. Eggers and J. Larus, Eds. New York, NY, USA: ACM Press, Mar. 2008, pp. 308-318.
5. X. Zhang, L. van Doorn, T. Jaeger, R. Perez, and R. Sailer, "Secure Coprocessor-Based Intrusion Detection," in Proceedings of the 10th ACM SIGOPS European Workshop, G. Muller and E. Jul, Eds. New York, NY, USA: ACM Press, Jul. 2002, pp. 239-242.
6. N. L. Petroni, Jr., T. Fraser, J. Molina, and W. A. Arbaugh, "Copilot - A Coprocessor-based Kernel Runtime Integrity Monitor," in Proceedings of the 13th USENIX Security Symposium, M. Blaze, Ed. San Diego, CA, USA: USENIX Press, Aug. 2004, pp. 179-194.
7. T. R. McEvoy and S. D. Wolthusen, "Using Observations of Invariant Behavior to Detect Malicious Agency in Distributed Environments," in Proceedings of IT Incident Management and IT Forensics (IMF 2008), ser. Lecture Notes in Informatics, vol. 140. Mannheim, Germany: GI, Sep. 2008, pp. 55-72.
8. P. D. Williams and E. H. Spafford, "CuPIDS: An Exploration of Highly Focused, Co-Processor-based Information System Protection," Computer Networks, vol. 51, no. 5, pp. 1284- 1298, Apr. 2007.
9. T. R. McEvoy and S. D. Wolthusen, "Concurrent Host Integrity Protection and Intrusion Detection," 2009, (submitted for publication).
10. N. L. Petroni, T. Fraser, A. Walters, and W. A. Arbaugh, "An Architecture for Specification-Based Detection of Semantic Integrity Violations in Kernel Dynamic Data," in Proceedings of the 15th USENIX Security Symposium, Vancouver, BC, Canada, 2006, pp. 289-304.
11. N. L. Petroni Jr. and M. Hicks, "Automated Detection of Persistent Kernel Control-Flow Attacks," in Proceedings of the 14th ACM Conference on Computer and Communications Security (CCS 2007), S. D. C. di Vimercati and P. Syverson, Eds. New York, NY, USA: ACM Press, Oct. 2007, pp. 103-115.
12. M. Almgren, U. Lindqvist, and E. Jonsson, "A Multi-Sensor Model to Improve Automated Attack Detection," in Proceedings of the 11th International Symposium on Recent Advances in Intrusion Detection (RAID 2008), ser. Lecture Notes in Computer Science, R. Lippmann, E. Kirda, and A. Trachtenberg, Eds., vol. 5230. Heidelberg, Germany: Springer-Verlag, Sep. 2008, pp. 291-310.
13. J. L. Hennessy and D. A. Patterson, Computer Architecture: A Quantitative Approach, 4th ed. Morgan Kaufmann Publishers (Elsevier), 2008.
14. P. J. Denning, "The Working Set Model for Program Behavior," in Communications of the ACM, vol. 11. Massachusetts Institute of Technology, Cambridge, Massachusetts: ACM, 1968, pp. 323-333.
15. P. J. Denning and S. C. Schwartz, "Properties of the Working- Set Model," in Communications of the ACM, vol. 15. Princeton University, Department of Electrical Engineering: ACM, 1972, pp. 191-198.
16. S. Albers, L. M. Favrholdt, and O. Giel, "On paging with locality of reference," J. Comput. Syst. Sci., vol. 70, no. 2, pp. 145-175, 2005.
17. E. Torng, "A unified analysis of paging and caching," Algorithmica, vol. 20, pp. 194-203, 1998.
18. A. Agarwal, "Analysis of cache performance for operating systems and multiprogramming," Ph.D. dissertation, Stanford, CA, USA, 1987.
19. nVIDIA. (2009, May) Nvidia cuda programming guide. nVIDIA. [Online]. Available: http://developer.download.nvidia.com/compute/cuda/221/toolkit/docs/ NVIDIA-CUDA-Programming-Guide2.2.1.pdf.