Understanding and visualizing full systems with data flow tomography

Operating Systems Review (ACM)

Volumn 42, Issue 2, 2008, Pages 211-221

  Mysore, Shashidhar ^a   Mazloom, Bita ^a   Agrawal, Banit ^a   Sherwood, Timothy ^a  

^a University of California   (United States)

Author keywords

Data flow tracking; Tomography; Virtual machine

Indexed keywords

CARDIOVASCULAR SYSTEM; COMMUNICATION SYSTEMS; COMPUTER SOFTWARE; DATA FLOW ANALYSIS;

DATA FLOW TOMOGRAPHY; DATA FLOW TRACKING; VIRTUAL MACHINES;

VISUALIZATION;

EID: 77957774202     PISSN: 01635980     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1353535.1346308     Document Type: Conference Paper

References (32)

1. Marcos K. Aguilera, Jeffrey C. Mogul, Janet L. Wiener, Patrick Reynolds, and Athicha Muthitacharoen. Performance debugging for distributed systems of black boxes. In SOSP '03: Proceedings of the nineteenth ACM symposium on Operating systems principles, pages 74-89. ACM Press, 2003. ISBN 1-58113-757-5.
2. Paul Barham, Austin Donnelly, Rebecca Isaacs, and Richard Mortier. Using magpie for request extraction and workload modelling. In OSDI'04: Proceedings of the 6th conference on Symposium on Opearting Systems Design & Implementation. USENIX Association, 2004.
3. F. Bellard. QEMU, A fast and portable dynamic translator. In USENIX Annual Technical Conference, April 2005.
4. Miguel Castro, Manuel Costa, and Tim Harris. Securing software by enforcing data-flow integrity. In USENIX'06: Proceedings of the 7th conference on USENIX Symposium on Operating Systems Design and Implementation. USENIX Association, 2006.
5. Stephen Chong, Jed Liu, Andrew C. Myers, Xin Qi, K. Vikram, Lantian Zheng, and Xin Zheng. Secure web applications via automatic partitioning. In In Proceedings of the 21st ACM Symposium on Operating Systems Principles (SOSP'07), October 2007.
6. Jim Chow, Ben Pfaff, Tal Garfinkel, Kevin Christopher, and Mendel Rosenblum. Understanding data lifetime via whole system simulation. In SSYM'04: Proceedings of the 13th conference on USENIX Security Symposium, pages 22-22. USENIX Association, 2004.
7. Manuel Costa, Jon Crowcroft, Miguel Castro, Antony Rowstron, Lidong Zhou, Lintao Zhang, and Paul Barham. Vigilante: end-to-end containment of internet worms. In SOSP '05: Proceedings of the twentieth ACM symposium on Operating systems principles, pages 133-147. ACM Press, 2005. ISBN 1-59593-079-5.
8. Jedidiah R. Crandall and Frederic T. Chong. Minos: Control Data Attack Prevention Orthogonal to Memory Model. In MICRO 37: Proceedings of the 37th annual IEEE/ACM International Symposium on Microarchitecture, pages 221-232, Washington, DC, USA, 2004. IEEE Computer Society. ISBN 0-7695-2126-6.
9. Jedidiah R. Crandall, Zhendong Su, S. Felix Wu, and Frederic T. Chong. On deriving unknown vulnerabilities from zero-day polymorphic and metamorphic worm exploits. In CCS '05: Proceedings of the 12th ACM conference on Computer and communications security, pages 235-248. ACM Press, 2005. ISBN 1-59593-226-7.
10. Michael Dalton, Hari Kannan, and Christos Kozyrakis. Raksha: A Flexible Information Flow Architecture for Software Security. In 34th Intl. Symposium on Computer Architecture (ISCA), 2007.
11. Jeffrey Dean, James E. Hicks, Carl A. Waldspurger, William E. Weihl, and George Chrysos. Profileme: Hardware support for instruction-level profiling on out-of-order processors. In Microarchitecture, 1997. Proceedings. Thirtieth Annual IEEE/ACM International Symposium on, pages 292-302. IEEE Computer Society, 2004. ISBN 0-8186-7977-8.
12. Petros Efstathopoulos, Maxwell Krohn, Steve VanDeBogart, Cliff Frey, David Ziegler, Eddie Kohler, David Mazières, Frans Kaashoek, and Robert Morris. Labels and event processes in the asbestos operating system. SIGOPS Oper. Syst. Rev., 39(5):17-30, 2005. ISSN 0163-5980.
13. Feng Qin, Cheng Wang, Zhenmin Li, Ho-seop Kim, Yuanyuan Zhou and Youfeng Wu. LIFT: A Low-Overhead Practical Information Flow Tracking System for Detecting General Security Attacks. In Annual IEEE/ACM International Symposium on Microarchitecture, 2006.
14. Guru Venkataramani, Brandyn Roemer, Yan Solihin and Milos Prvulovic. MemTracker: Efficient and Programmable Support for Memory Access Monitoring and Debugging. In 13th International Symposium on High-Performance Computer Architecture (HPCA-13), February 2007.
15. Andreas Haeberlen, Petr Kouznetsov, and Peter Druschel. Peerreview: Practical accountability for distributed systems. In In Proceedings of the 21st ACM Symposium on Operating Systems Principles (SOSP'07), October 2007.
16. Matthias Hauswirth, Peter F. Sweeney, Amer Diwan, and Michael Hind. Vertical profiling: understanding the behavior of object-priented applications. In OOPSLA '04: Proceedings of the 19th annual ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications, pages 251-269. ACM Press, 2004. ISBN 1-58113-831-9.
17. Alex Ho, Michael Fetterman, Christopher Clark, Andrew Warfield, and Steven Hand. Practical taint-based protection using demand emulation. SIGOPS Oper. Syst. Rev., 40(4):29-41, 2006. ISSN 0163-5980.
18. J. Newsome and D. Song. Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on commodity software. In 12th Annual Network and Distributed System Security Symposium (NDSS '05), 2005.
19. Nikolai Joukov, Avishay Traeger, Rakesh Iyer, Charles P. Wright, and Erez Zadok. Operating system profiling via latency analysis. In USENIX'06: Proceedings of the 7th conference on USENIX Symposium on Operating Systems Design and Implementation. USENIX Association, 2006.
20. Emre Kiciman and Benjamin Livshits. Ajaxscope: A platform for remotely monitoring the client-side behavior of web 2.0 applications. In In Proceedings of the 21st ACM Symposium on Operating Systems Principles (SOSP '07), October 2007.
21. James R. Larus. Whole program paths. In PLDI '99: Proceedings of the ACM SIGPLAN 1999 conference on Programming language design and implementation, pages 259-269. ACM Press, 1999. ISBN 1-58113-094-5.
22. John Levon and Phillippe Elie. Oprofile: oprofile.sourceforge.net.
23. Satish Narayanasamy, Gilles Pokam, and Brad Calder. Bugnet: Continuously recording program execution for deterministic replay debugging. In ISCA '05: Proceedings of the 32nd annual international symposium on Computer Architecture, pages 284-295. IEEE Computer Society, 2005. ISBN 0-7695-2270-X.
24. Georgios Portokalidis, Asia Slowinska, and Herbert Bos. Argos: an emulator for fingerprinting zero-day attacks for advertised honeypots with automatic signature generation. SIGOPS Oper. Syst. Rev., 40(4):15-27, 2006. ISSN 0163-5980.
25. Zed A. Shaw. Mongrel: mongrel.rubyforge.org.
26. G. Edward Suh, Jae W. Lee, David Zhang, and Srinivas Devadas. Secure Program Execution via Dynamic Information Flow Tracking. In ASPLOS-XI: Proceedings of the 11th international conference on Architectural support for programming languages and operating systems, pages 85-96, New York, NY, USA, 2004. ACM Press. ISBN 1-58113-804-0.
27. Peter F. Sweeney, Matthias Hauswirth, Brendon Cahoon, Perry Cheng, Amer Diwan, David Grove, and Michael Hind. Using hardware performance moniters to understand the behavior of java applications. In USENIX 3rd Virtual Machine Research and Technology Symposium (VM'04). ACM Press, 2004.
28. Úlfar Erlingsson, Silicon Valley, Martin Abadi, Michael Vrable, Mihai Budiu, and George C. Necula. Xfi: software guards for system address spaces. In USENIX'06: Proceedings of the 7th conference on USENIX Symposium on Operating Systems Design and Implementation. USENIX Association, 2006.
29. Neil Vachharajani, Matthew J. Bridges, Jonathan Chang, Ram Rangan, Guilherme Ottoni, Jason A. Blome, George A. Reis, Manish Vachharajani, and David I. August. Rifle: An architectural framework for user-centric information-flow security. In MICRO 37: Proceedings of the 37th annual IEEE/ACM International Symposium on Microarchitecture, pages 243-254. IEEE Computer Society, 2004. ISBN 0-7695-2126-6.
30. Min Xu, Rastislav Bodik, and Mark D. Hill. A "flight data recorder" for enabling full-system multiprocessor deterministic replay. In ISCA '03: Proceedings of the 30th annual international symposium on Computer architecture, pages 122-135. ACM Press, 2003. ISBN 0-7695-1945-8.
31. Wei Xu, Sandeep Bhatkar, and R. Sekar. Taint-enhanced policy enforcement: a practical approach to defeat a wide range of attacks. In USENIX-SS'06: Proceedings of the 15th conference on USENIX Security Symposium. USENIX Association, 2006.
32. Nickolai Zeldovich, Silas Boyd-Wickizer, Eddie Kohler, and David Mazières. Making information flow explicit in histar. In USENIX'06: Proceedings of the 7th conference on USENIX Symposium on Operating Systems Design and Implementation. USENIX Association, 2006.