Tachyon: Tandem execution for efficient live patch testing

Proceedings of the 21st USENIX Security Symposium

Volumn , Issue , 2012, Pages 617-630

  Maurer, Matthew ^a   Brumley, David ^a  

^a CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CONSISTENCY MODEL; PATCH TESTING; SECURITY INCIDENT;

COMPUTER OPERATING SYSTEMS;

EID: 84910644560     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (24)

1. undodb. http://undo-software.com, Nov. 2011.
2. AVIRAM, A., WENG, S.-C., HU, S., AND FORD, B. Efficient system-enforced deterministic parallelism. In Proceedings of the 9th USENIX conference on Operating systems design and implementation (Berkeley, CA, USA, 2010), OSDI’10, USENIX Association, pp. 1–16.
3. BERGAN, T., ANDERSON, O., DEVIETTI, J., CEZE, L., AND GROSSMAN, D. Coredet: a compiler and runtime system for deterministic multithreaded execution. SIGARCH Comput. Archit. News 38 (March 2010), 53–64.
4. BitBlaze binary analysis project. http://bitblaze.cs.berkeley.edu, 2007.
5. BRUMLEY, D., CABALLERO, J., LIANG, Z., NEWSOME, J., AND SONG, D. Towards automatic discovery of deviations in binary implementations with applications to error detection and fingerprint generation. In Proceedings of the USENIX Security Symposium (Boston, MA, Aug. 2007).
6. CADAR, C., DUNBAR, D., AND ENGLER, D. Klee: Unassisted and automatic generation of high-coverage tests for complex systems programs. In Proceedings of the USENIX Symposium on Operating System Design and Implementation (2008).
7. COX, B., EVANS, D., FILIPI, A., ROWANHILL, J., AND HU, W. N-variant systems: A secretless framework for security through diversity. In USENIX Security Symposium (2006), no. August, pp. 1–16.
8. CUI, H., WU, J., GALLAGHER, J., GUO, H., AND YANG, J. Efficient deterministic multithreading through schedule relaxation. In Proceedings of the Twenty-Third ACM Symposium on Operating Systems Principles (New York, NY, USA, 2011), SOSP’11, ACM, pp. 337–351.
9. DUNLAP, G. W., KING, S. T., CINAR, S., BASRAI, M. A., AND CHEN, P. M. Revirt: Enabling intrusion analysis through virtual-machine logging and replay. In In Proceedings of the 2002 Symposium on Operating Systems Design and Implementation (OSDI (2002), pp. 211–224.
10. FSF. Documentation for GDB, 7.3.1 ed., Sept. 2011.
11. GUO, Z., WANG, X., TANG, J., LIU, X., XU, Z., WU, M., KAASHOEK, M. F., AND ZHANG, Z. R2: An application-level kernel for record and replay. In OSDI (2008), pp. 193–208.
12. HERROD, S. The amazing vm record/replay feature in vmware workstation 6. http://communities.vmware.com/community/vmtn/cto/steve/blog/2007/04/18/ the-amazing-vm-recordreplay-feature-invmware-workstation-6, Apr. 2007.
13. JAGER, I., AVGERINOS, T., SCHWARTZ, E., AND BRUMLEY, D. BAP: A binary analysis platform. In Proceedings of the Conference on Computer Aided Verification (2011).
14. LANE, B. A. The USAF standard desktop configuration (SDC). download.microsoft.com, June 2007.
15. LIU, T., CURTSINGER, C., AND BERGER, E. D. Dthreads: efficient deterministic multithreading. In Proceedings of the Twenty-Third ACM Symposium on Operating Systems Principles (New York, NY, USA, 2011), SOSP’11, ACM, pp. 327–336.
16. LUK, C.-K., COHN, R., MUTH, R., PATIL, H., KLAUSER, A., LOWNEY, G., WALLACE, S., REDDI, V. J., AND HAZELWOOD, K. Pin: Building customized program analysis tools with dynamic instrumentation. In Proceedings of the ACM Conference on Programming Language Design and Implementation (June 2005).
17. MAGNUSSON, P. S., CHRISTENSSON, M., ESKILSON, J., FORSGREN, D., HÅLLBERG, G., HÖGBERG, J., LARSSON, F., MOESTEDT, A., AND WERNER, B. Simics: A full system simulation platform. Computer 35 (February 2002), 50–58.
18. MELL, P., BERGERON, T., AND HENNING, D. Creating a Patch and Vulnerability Management Program. National Institution of Standards and Technology, Nov. 2005.
19. MICROSOFT. Microsoft security intelligence report vol. 11. Tech. rep., Microsoft, 2011.
20. MONTESINOS, P., HICKS, M., KING, S. T., AND TORRELLAS, J. Capo. ACM SIGPLAN Notices 44, 3 (Feb. 2009), 73.
21. NETHERCOTE, N., AND SEWARD, J. Valgrind: A program supervision framework. In Proceedings of the Third Workshop on Runtime Verification (Boulder, Colorado, USA, July 2003).
22. PATIL, H., PEREIRA, C., STALLCUP, M., LUECK, G., AND COWNIE, J. Pinplay: a framework for deterministic replay and reproducible analysis of parallel programs. In Proceedings of the 8th annual IEEE/ACM international symposium on Code generation and optimization (New York, NY, USA, 2010), CGO’10, ACM, pp. 2–11.
23. TUCEK, J., XIONG, W., AND ZHOU, Y. Efficient online validation with delta execution. ACM SIGPLAN Notices 44, 3 (Feb. 2009), 193.
24. XU, M., MALYUGIN, V., SHELDON, J., VENKITACHALAM, G., WEISSMAN, B., AND INC, V. Retrace: Collecting execution trace with virtual machine deterministic replay. In In Proceedings of the 3rd Annual Workshop on Modeling, Benchmarking and Simulation, MoBS (2007).