Active security

Proceedings of the 12th ACM Workshop on Hot Topics in Networks, HotNets 2013

Volumn , Issue , 2013, Pages

  Hand, Ryan ^a   Ton, Michael ^a   Keller, Eric ^a  

^a UNIVERSITY OF COLORADO   (United States)

Author keywords

Central management; Digital forensics; Network security

Indexed keywords

ACTIVE SECURITIES; ACTIVE SECURITY SYSTEMS; ATTACK SCENARIOS; DIGITAL FORENSIC; FORENSIC EVIDENCE; INTRUSION DETECTION SYSTEMS; PROGRAMMING ENVIRONMENT; SOFTWARE-DEFINED NETWORKINGS;

COMPUTER CRIME; COMPUTER OPERATING SYSTEMS; ELECTRIC LIGHTING; INTERFACE STATES;

NETWORK SECURITY;

EID: 84893266021     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2535771.2535794     Document Type: Conference Paper

References (38)

1. Arbor Networks Peakflow SP Threat Management System. http://www. arbornetworks.com/products/peakflow/tms.
2. Immunity debugger. http://www.immunityinc.com/products-immdbg.shtml.
3. Solarwinds. http://www.solarwinds.com/log-event-manager/active-response- library.aspx.
4. VMware Horizon Mobile. http://www.vmware.com/products/desktop- virtualization/mobile/overview.html.
5. Ballarat grammar secures byod with hp sentinel sdn. http://h20195.www2. hp.com/v2/GetPDF.aspx/4AA4-7496ENW.pdf, Aug. 2013.
6. Floodlight. http://floodlight.openflowhub.org, 2013.
7. Linux memory extrator. https://code.google.com/p/lime-forensics/, 2013.
8. Snort. http://www.snort.org/, 2013.
9. G. Abelar and D. Tesch. Role of CS-MARS in Your Network. http://www.ciscopress.com/articles/article.asp?p=664149, 2006.
10. D. S. Alexander and J.M. Smith. The Architecture of ALIEN. In Proc. International Working Conference on Active Networks (IWAN), 1999.
11. J. Andrus, C. Dall, A. V. Hof, O. Laadan, and J. Nieh. Cells: a virtual mobile smartphone architecture. In Proc. Symposium on Operating Systems Principles (SOSP), 2011.
12. D. G. Andy Sayler, Eric Keller. Jobber: Automating inter-tenant trust in the cloud. In Proc. Workshop on Hot Topics in Cloud Computing (HotCloud), 2013.
13. W. A. Arbaugh, D. J. Farber, and J. M. Smith. A secure and reliable bootstrap architecture. In Proc. IEEE Symposium on Security and Privacy, 1997.
14. A. M. Azab, P. Ning, Z. Wang, X. Jiang, X. Zhang, and N.C. Skalsky. Hypersentry: enabling stealthy in-context measurement of hypervisor integrity. In Proc. ACM conference on Computer and communications security (CCS), 2010.
15. Y. Bartal. Firmato: A novel firewall management toolkit. Proceedings of the 1999 IEEE Symposium on Security and Privacy, 22(4): 381-420, 2004.
16. B. N. Bershad, S. Savage, P. Pardyak, E. G. Sirer, M. E. Fiuczynski, D. Becker, C. Chambers, and S. Eggers. Extensibility safety and performance in the spin operating system. In Proc. symposium on Operating systems principles (SOSP), 1995.
17. M. Canini, D. Venzano, P. Peresini, D. Kostic, and J. Rexford. A NICE way to test OpenFlow applications. In Proc. Network System Design and Implementation (NSDI), Apr. 2012.
18. M. Casado, M. J. Freedman, J. Pettit, J. Luo, N. McKeown, and S. Shenker. Ethane: taking control of the enterprise. In Proc. SIGCOMM, 2007.
19. B. Dolan-Gavitt. The VAD tree: A process-eye view of physical memory. Digital Investigation, 4: 62-64, 2007.
20. P. Efstathopoulos, M. Krohn, S. VanDeBogart, C. Frey, D. Ziegler, E. Kohler, D. Mazières, F. Kaashoek, and R. Morris. Labels and event processes in the asbestos operating system. In Proc. symposium on Operating systems principles (SOSP), 2005.
21. S. Garfinkel. The criminal cloud. http://www.technologyreview.com/news/ 425770/the-criminal-cloud/, Oct 2011.
22. A. Greenberg, G. Hjalmtysson, D. A. Maltz, A. Myers, J. Rexford, G. Xie, H. Yan, J. Zhan, and H. Zhang. A clean slate 4d approach to network control and management. SIGCOMM Comput. Commun. Rev. (CCR), 35(5): 41-54, Oct. 2005.
23. A. Haeberlen, P. Aditya, R. Rodrigues, and P. Druschel. Accountable virtual machines. In Proc. USENIX conference on Operating systems design and implementation (OSDI), 2010.
24. J. H. Jafarian, E. Al-Shaer, and Q. Duan. Openflow random host mutation: transparent moving target defense using software defined networking. In Proc. Workshop on Hot topics in software defined networks (HotSDN), 2012.
25. S. Jajodia, A. K. Ghosh, V. Swarup, C. Wang, and X. S. Wang, editors. Moving Target Defense - Creating Asymmetric Uncertainty for Cyber Threats, Volume 54 of Advances in Information Security. Springer, 2011.
26. G. Klein, K. Elphinstone, G. Heiser, J. Andronick, D. Cock, P. Derrin, D. Elkaduwe, K. Engelhardt, R. Kolanski, M. Norrish, et al. seL4: Formal verification of an OS kernel. In Proc. symposium on Operating systems principles (SOSP), 2009.
27. M. Krohn, A. Yip, M. Brodsky, N. Cliffer, M. F. Kaashoek, E. Kohler, and R. Morris. Information flow control for standard os abstractions. In Proc. symposium on Operating systems principles (SOSP), 2007.
28. C.-C. Lin, M. Caesar, and J. V. der Merwe. Towards Interactive Debugging for ISP Networks. In ACM Workshop on Hot Topics in Networks (HotNets), Oct. 2009.
29. N. McKeown, T. Anderson, H. Balakrishnan, G. Parulkar, L. Peterson, J. Rexford, S. Shenker, and J. Turner. OpenFlow: Enabling innovation in campus networks. SIGCOMM Comput. Commun. Rev. (CCR), 38(2), 2008.
30. S. Nagarakatte, J. Zhao, M. M. Martin, and S. Zdancewic. SoftBound: highly compatible and complete spatial memory safety for c. In Proc. conference on Programming language design and implementation (PLDI), 2009.
31. R. Perez-Pena. Universities face a rising barrage of cyberattacks. http://www.nytimes.com/2013/07/17/education/barrage-of-cyberattacks\\ -challenges-campus-culture.html, Jul 2013.
32. N. L. Petroni Jr., T. Fraser, J. Molina, and W.A. Arbaugh. Copilot - a coprocessor-based kernel runtime integrity monitor. In Proc. USENIX Security Symposium, 2004.
33. P. Porras, S. Shin, V. Yegneswaran, M. Fong, M. Tyson, and G. Gu. A security enforcement kernel for OpenFlow networks. In Proc. workshop on Hot topics in software defined networks (HotSDN), 2012.
34. M. Riley and B. Elgin. Chinas Cyberspies Outwit Model for Bonds Q. http://www.bloomberg.com/news/2013-05-01/china-cyberspies-outwit-u-s-stealing\\ -military-secrets.html, May 2013.
35. S. Shin, P. Porras, V. Yegneswaran, M. Fong, G. Gu, and M. Tyson. Fresco: Modular composable security services for software-defined networks. In Proc. Network and Distributed System Security Symposium (NDSS), February 2013.
36. A. Wool. A quantitative study of firewall configuration errors. Computer, 37: 62-67, 2004.
37. A. Wundsam, D. Levin, S. Seetharaman, and A. Feldmann. Ofrewind: enabling record and replay troubleshooting for networks. In USENIX Annual Technical Conference, 2011.
38. N. Zeldovich, S. Boyd-Wickizer, E. Kohler, and D. Mazières. Making information flow explicit in histar. In Proc. symposium on Operating systems design and implementation (OSDI), 2006.