An architecture for specification-based detection of semantic integrity violations in kernel dynamic data

15th USENIX Security Symposium

Volumn , Issue , 2006, Pages 289-304

  Petroni, Nick L ^a   Fraser, Timothy ^b   Walters, AAron ^c   Arbaugh, William A ^a  

^a University of Maryland ^*  (United States)

^b UNIVERSITY OF MARYLAND   (United States)

^c Purdue University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DATA STRUCTURES; SEMANTICS; SPECIFICATION LANGUAGES; SPECIFICATIONS;

CHANGING DYNAMICS; CURRENT GENERATION; CURRENT MONITORING; DYNAMIC DATA STRUCTURE; GENERAL ARCHITECTURES; INTEGRITY MONITOR; SEMANTIC INTEGRITY; SEMANTIC INTEGRITY CONSTRAINTS;

MEMORY ARCHITECTURE;

EID: 84991799247     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (37)

1. The Unified Modeling Language (UML). http://www.uml.org, 2005.
2. Trusted Computing Group (TCG). http://www.trustedcomputinggroup.org, 2005.
3. W. E. Boebert and R. Y. Kain. A Practical Alternative to Hierarchical Integrity Policies. In Proceedings of the 8th National Computer Security Conference, pages 18–27, Gaithersburg, Maryland, September 1985.
4. T. Bray, J. Paoli, C. M. Sperberg-McQueen, and E. Maler. Extensible Markup Language. Recommendation RECxml-20001006, World Wide Web Consortium, October 2000.
5. B. Chen and R. Morris. Certifying Program Execution with Secure Processors. In 9th Workshop on Hot Topics in Operating Systems (HotOS), Lihue, Hawaii, May 2003.
6. J. Clark and S. Derose. XML Path Language (XPath) Version 1.0. Recommendation REC-xpath-19991116, World Wide Web Consortium, November 1999.
7. B. Demsky and M. Rinard. Automatic Detection and Repair of Errors in Data Structures. In Proceedings of the 18th Annual ACM SIGPLAN Conference on Object-Oriented Programming, Systems, Languages, and Applications (OOPSLA), Anaheim, CA, October 2003.
8. B. Demsky and M. Rinard. Static Specification Analysis for Termination of Specification-Based Data Structure Repair. In Proceedings of the 14th International Symposium on Software Reliability Engineering, November 2003.
9. B. Demsky and M. Rinard. Data Structure Repair Using Goal-Directed Reasoning. In Proceedings of the 27th International Conference on Software Engineering (ICSE), St. Louis, MO, May 2005.
10. R. Droms. Dynamic host configuration protocol. Technical Report RFC 2131, Bucknell University, March 1997.
11. D. Ferraiolo and R. Kuhn. Role-Based Access Controls. In Proceedings of the 15th National Computer Security Conference, pages 554–563, Baltimore, Maryland, October 1992.
12. T. Garfink el, B. Pfaff, J. Chow, M. Rosenblum, and D. Boneh. Terra: A Virtual-Machine Based Platform for Trusted Computing. In 19th ACM Symposium on Operating Systems Principles (SOSP), Sagamore, NY, October 2003.
13. T. Garfink el and M. Rosenblum. A Virtual Machine Introspection Based Architecture for Intrusion Detection. In The 10th Annual Symposium on Network and Distributed System Security (NDSS), San Diego, CA, February 2003.
14. V. Haldar, D. Chandra, and M. Franz. Semantic remote attestation – a virtual machine directed approach to trusted computing. In Proceedings of the 3rd USENIX Virtual Machine Research & Technology Symposium, May 2004.
15. M. Hammer and D. McLeod. A Framework For Data Base Semantic Integrity. In Proceedings of the 2nd International Conference on Software Engineering (ICSE), San Francisco, CA, October 1976.
16. G. Haugk, F. Lax, R. Royer, and J. Williams. The 5ESS(TM) switching system: Maintenance capabilities. AT & T Technical Journal, 64 part 2(6):1385 – 1416, July-August 1985.
17. D. Hollingworth and T. Redmond. Enhancing operating system resistance to information warfare. In MIL-COM 2000. 21st Century Military Communications Conference Proceedings, volume 2, pages 1037–1041, Los Angeles, CA, USA, October 2000.
18. R. Kennell and L. H. Jamieson. Establishing the Genuinity of Remote Computer Systems. In Proceedings of the 12th USENIX Security Symposium, pages 295–310, Washington, D.C., August 2003.
19. G. H. Kim and E. H. Spafford. The Design and Implementation of Tripwire: A File System Integrity Checker. In Proceedings of the 2nd ACM Conference on Computer and Communications Security, pages 18–29, Fairfax, Virgina, November 1994.
20. C. Ko, G. Fink, and K. Levitt. Automated Detection of Vulnerabilities in Privileged Programs by Execution Monitoring. In Proceedings of the 10th Annual Computer Security Applications Conference (ACSAC), Orlando, FL, 1994.
21. C. Ko, M. Ruschitzka, and K. Levitt. Execution Monitoring of Security-Critical Programs in Distributed Systems: A Specification-based Approach . In 1997 IEEE Symposium on Security and Privacy, Oakland, CA, May 1997.
22. P. A. Loscocco and S. D. Smalley. Integrating Flexible Support for Security Policies into the Linux Operating System. In Proceedings of the FREENIX Track: 2001 USENIX Annual Technical Conference, Boston, Massachusetts, June 2001.
23. R. Love. Linux Kernel Development. Novell Press, second edition, 2005.
24. P. Mockapetris. Domain names—conceptsand facilities. Technical Report RFC 1034, ISI, November 1987.
25. S. Mourad and D. Andrews. On the Reliability of the IBM MVS/XA Operating System. IEEE Transactions on Software Engineering, 13(10):1135–1139, 1987.
26. National Computer Security Center. Department of Defense Trusted Computer System Evaluation Criteria, December 1985.
27. C. Nentwich, L. Capra, W. Emmerich, and A. Finkelstein. xlinkit: a Consistency Checking and Smart Link Generation Service. ACM Transactions on Internet Technology, 2(2):151 – 185, May 2002.
28. C. Nentwich, W. Emmerich, and A. Finkelstein. Consistency management with repair actions. In Proceedings fo the 25th International Conference on Software Engineering, May 2003.
29. N. L. Petroni, T. Fraser, J. Molina, and W. A. Arbaugh. Copilot – a Coprocessor-based Kernel Runtime Integrity Monitor. In 13th USENIX Security Symposium, San Diego, CA, August 2004.
30. R. Sailer, T. Jaeger, X. Zhang, and L. van Doorn. Attestation-based Policy Enforcement for Remote Access. In 11th ACM Conference on Computer and Communications Security (CCS), Washington, DC, November 2004.
31. R. Sailer, X. Zhang, T. Jaeger, and L. van Doorn. Design and Implementation of a TCG-based Integrity Measurement Architecture. In 13th USENIX Security Symposium, San Diego, CA, August 2004.
32. R. Sekar and P. Uppuluri. Synthesizing fast intrusion prevention/detection systems from high-level specifications. In 8th USENIX Security Symposium, pages 63–78, Washington, D.C., August 1999.
33. A. Seshadri, M. Luk, E. Shi, A. Perrig, L. van Doorn, and P. Khosla. Pioneer: Verifying Code Integrity and Enforcing Untampered Code Execution on Legacy Systems. In Proceedings of the 20th ACM Symposium on Operating Systems Principles (SOSP), Brighton, United Kingdom, October 2005.
34. A. Seshadri, A. Perrig, L. van Doorn, and P. Khosla. SWATT: SoftWare-based ATTestation for Embedded Devices. In IEEE Symposium on Security and Privacy, Oakland, CA, May 2004.
35. E. Shi, A. Perrig, and L. V. Doorn. BIND: A Fine-grained Attestation Service for Secure Distributed Systems. In Proceedings of the 2005 IEEE Symposium on Security and Privacy, Oakland, CA, May 2005.
36. C. Tseng, P. Balasubramanyam, C. Ko, R. Limprasittiporn, J. Rowe, and K. Levitt. A specification-based instrusion detection system for aodv. In 2003 ACM Workshop on security of Ad Hoc and Sensor Networks (SASN’03), Fairfax, VA, October 2003.
37. X. Zhang, L. van Doorn, T. Jaeger, R. Perez, and R. Sailer. Secure Coprocessor-based Intrusion Detection. In Proceedings of the Tenth ACM SIGOPS European Workshop, Saint-Emilion, France, September 2002.