Beyond planted bugs in 'trusting trust': The input-processing frontier

IEEE Security and Privacy

Volumn 12, Issue 1, 2014, Pages 83-87

  Bratus, Sergey ^a   Darley, Trey ^b   Locasto, Michael ^c   Patterson, Meredith L ^b   Shapiro, Rebecca Bx ^d   Shubina, Anna ^b  

^a Dartmouth College   (United States)

^b Splunk's Security Practice ^*  (United States)

^c UNIVERSITY OF CALGARY   (Canada)

^d DARTMOUTH COLLEGE   (United States)

Author keywords

big data; CSA; intrusion detection system; SIEM

Indexed keywords

ELECTRICAL ENGINEERING;

BIG DATUM; CSA; INTRUSION DETECTION SYSTEMS; NETWORK MONITORING; SECURITY INFORMATION AND EVENT MANAGEMENTS; SECURITY TOOLS; SIEM;

COMPUTER NETWORKS;

EID: 84898417979     PISSN: 15407993     EISSN: None     Source Type: Journal    
DOI: 10.1109/MSP.2014.1     Document Type: Article

References (9)

1. K. Thompson, "Reflections on Trusting Trust," Comm. ACM, vol. 8, no. 27, 1984, pp. 761-763.
2. "A Tale of Two Pwnies (Part 1)," Chromium blog, 22 May 2012; ht tp://blog.chromium.org/2012/05/tale-of-two-pwnies-part-1.html.
3. J. Oakley and S. Bratus, "Exploiting the Hard-Working DWARF: Trojan and Exploit Techniques with No Native Executable Code," Proc. 5th Usenix Conf. Offensive Technologies, Usenix, 2011; https://www. usenix.org/event/ woot11/tech/final-files/Oakley.pdf.
4. R. Shapiro, S. Bratus, and S.W. Smith, "'Weird Machines' in ELF: A Spotlight on the Underappreciated Metadata," Proc. 7th Usenix Conf. Offensive Technologies, Usenix, 2013; https://www. usenix.org/conference/woot13/ workshop-program/presentation/Shapiro.
5. D. Kaminsky, L. Sassaman, and M. Patterson, "PKI Layer Cake: New Collision Attacks against the Global X.509 CA Infrastructure," 5 Aug. 2009; http://ioactive.com/pdfs/PKILayerCake.pdf.
6. J. Freeman, "Android Bug Superior to Master Key," The Realm of the Avatar blog, http://www.saurik. com/id/18.
7. J. Bangert et al., "The Page-Fault Weird Machine: Lessons in Instruction-Less Computation," Proc. 7th Usenix Conf. Offensive Technologies, Usenix, 2013; https://www.usenix.org/conference/woot13/wo r k shop-p rog r am/presentation/Bangert.
8. M. Handley, V. Paxson, and C. Kriebich, "Network Intrusion Detection: Evasion, Traffic Normalization, and End-to-End Protocol Semantics," Proc. 10th Conf. Usenix Security Symp., vol. 10, 2001; https://www.usenix.org/conference/10th-usenix-security-symposium/n e t wo r k-i n t r u s i o n-detection-evasion-traffic-normalization.
9. T. Ptacek and T. Newsham, "Insertion, Evasion, and Denial of Service: Eluding Networking Intrustion Detection," 1998; http://ci teseer x . i st . p su.edu. viewdoc/summary?doi= 10.1.1.119.399.