Correlating multi-session attacks via replay

Proceedings of the 2nd Workshop on Hot Topics in System Dependability, HotDep 2006

Volumn , Issue , 2006, Pages

  Shafique, Fareha ^a   Po, Kenneth ^a   Goel, Ashvin ^a  

^a UNIVERSITY OF TORONTO   (Canada)

Author keywords

[No Author keywords available]

Indexed keywords

INTRUSION ANALYSIS; MULTIPLE SESSIONS; RECOVERY SYSTEMS; SHARED OBJECTS; SYSTEM CALLS;

EID: 85080671640     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (23)

1. Aaron B. Brown and David A. Patterson. Undo for operators: Building an undoable e-mail store. In Proceedings of the USENIX Technical Conference, pages 1-14, June 2003.
2. Subhachandra Chandra and Peter M. Chen. Whither generic recovery from application faults? A fault study using open-source software. In Proceedings of the IEEE Dependable Systems and Networks, pages 97-106, June 2000.
3. Ira Cohen, Steve Zhang, Moises Goldszmidt, Julie Symons, Terence Kelly, and Armando Fox. Capturing, indexing, clustering, and retrieving system history. In Symposium on Operating Systems Principles, pages 105-118, 2005.
4. Weidong Cui, Vern Paxson, Nicholas Weaver, and Randy Katz. Protocol-independent adaptive replay of application dialog. In Proceedings of the Network and Distributed System Security Symposium, February 2006.
5. George W. Dunlap, Samuel T. King, Sukru Cinar, Murtaza Basrai, and Peter M. Chen. ReVirt: Enabling intrusion analysis through virtual-machine logging and replay. In Proceedings of the USENIX Symposium on Operating Systems Design and Implementation, December 2002.
6. D. Gao, M. K. Reiter, and D. Song. On gray-box program tracking for anomaly detection. In Proceedings of the USENIX Security Symposium, pages 103-188, August 2004.
7. Dennis Geels, Gautam Altekar, Scott Shenker, and Ion Stoica. Replay debugging for distributed applications. In Proceedings of the USENIX Technical Conference, pages 289-300, June 2006.
8. Anup K. Ghosh, Aaron Schwartzbart, and Michael Schatz. Learning program behavior profiles for intrusion detection. In USENIX workshop on intrusion detection and network monitoring, 1999.
9. Jonathon T. Giffin, David Dagon, Somesh Jha, Wenke Lee, and Barton P. Miller. Environment-sensitive intrusion detection. In Proceedings of the Recent Advances in Intrusion Detection (RAID), pages 185-206, 2005.
10. Ashvin Goel, Wu-chang Feng, David Maier, Wu-chi Feng, and Jonathan Walpole. Forensix: A robust, high-performance reconstruction system. In Proceedings of the International Workshop on Security in Distributed Computing Systems (SDCS), June 2005. In conjunction with the International Conference on Distributed Computing Systems (ICDCS).
11. Ashvin Goel, Kenneth Po, Kamran Farhadi, Zheng Li, and Eyal de Lara. The Taser intrusion recovery system. In Proceedings of the Symposium on Operating Systems Principles, October 2005.
12. Ashvin Goel, Mike Shea, Sourabh Ahuja, Wu-chang Feng, Wu-chi Feng, David Maier, and Jonathan Walpole. Forensix: A robust, high-performance reconstruction system. Poster Session in Proceedings of the Symposium on Operating Systems Principles, October 2003.
13. Steven A. Hofmeyr, Stephanie Forrest, and Anil Somayaji. Intrusion detection using sequences of system calls. Journal of Computer Security, 6(3):151-180, 1998.
14. Samuel T. King and Peter M. Chen. Backtracking intrusions. In Proceedings of the Symposium on Operating Systems Principles, pages 223-236, October 2003.
15. David E. Lowell, Subhachandra Chandra, and Peter M. Chen. Exploring failure transparency and the limits of generic recovery. In Proceedings of the USENIX Symposium on Operating Systems Design and Implementation, pages 289-304, October 2000.
16. Bharat Mediratta. Gallery photo album organizer. http://gallery.menalto.com/, 2004.
17. Kiran Nagaraja, Fábio Oliveira, Ricardo Bianchini, Richard P. Martin, and Thu D. Nguyen. Understanding and dealing with operator mistakes in internet services. In Proceedings of the USENIX Symposium on Operating Systems Design and Implementation, pages 61-76, December 2004.
18. Feng Qin, Joseph Tucek, Jagadeesan Sundaresan, and Yuanyuan Zhou. Rx: Treating bugs as allergies - a safe method to survive software failures. In Proceedings of the Symposium on Operating Systems Principles, pages 235-248, October 2005.
19. Yasushi Saito. Jockey: a user-space library for record-replay debugging. In Proceedings of the International Symposium on Automated Analysis-driven Debugging (AADEBUG), pages 69-76, September 2005.
20. R. Sekar, V.N. Venkatakrishnan, Samik Basu, Sandeep Bhatkar, and Daniel C. DuVarney. Model-carrying code: a practical approach for safe execution of untrusted applications. In Proceedings of the Symposium on Operating Systems Principles, pages 15-28, 2003.
21. Sudarshan M. Srinivasan, Srikanth Kandula, Christopher R. Andrews, and Yuanyuan Zhou. Flashback: A lightweight extension for rollback and deterministic replay for software debugging. In Proceedings of the USENIX Technical Conference, pages 29-44, June 2004.
22. Helen J. Wang, John C. Platt, Yu Chen, Ruyun Zhang, and Yi-Min Wang. Automatic misconfiguration troubleshooting with PeerPressure. In Proceedings of the USENIX Symposium on Operating Systems Design and Implementation, pages 245-258, December 2004.
23. Huagang Xie and et. al. Linux intrusion detection system (LIDS) project. http://www.lids.org/.