Title
Hardware-Assisted Application Integrity Monitor
Abstract
Existing hardware-assisted methods monitor the integrity of hyper visors and operating systems, which are critical to system integrity. This protection is possible because of ``non-volatile'' data structures present in the machine's physical memory. In contrast, applications offer a more challenging protection target because they are dynamically allocated. Therefore, robust defenses against application tampering is still a difficult tasks that has remained an open problem. We propose "AppCheck," a hardware-assisted framework the protects the integrity of applications and server processes. We achieve that by leveraging semantic information extracted from the source code and input from a human developer. Unlike pure software defenses, AppCheck employs existing x86 features, namely System Management Mode, to acquire the necessary memory contents. If any of the these critical components become altered during runtime, AppCheck signals an alarm to a remote server notifying the operators of a potential security breach or software corruption.
Year
DOI
Venue
2012
10.1109/HICSS.2012.299
HICSS
Keywords
Field
DocType
open systems,x86 feature,hardware-assisted method,machine physical memory,integrity monitor,server process,software corruption,robust defenses,necessary memory content,hypervisor integrity,storage management,semantic information extraction,data structures,hardware-assisted application integrity monitor,physical memory,nonvolatile data structure,security breach,operating systems (computers),operating system,challenging protection target,open problem,critical component,feature extraction,system management mode,software defense,pure software defenses,system integrity,source code,appcheck signal,remote server,data integrity,hardware-assisted framework,security of data,human developer,hardware,kernel,human development,data structure,servers,linux,system integration,system management
x86,Computer science,Source code,Server,System integrity,Data integrity,Software,Open system (systems theory),Embedded system,System Management Mode
Conference
ISSN
ISBN
Citations 
1530-1605 E-ISBN : 978-0-7695-4525-7
978-0-7695-4525-7
1
PageRank 
References 
Authors
0.48
16
3
Name
Order
Citations
PageRank
Jiang Wang11136.95
Kun Sun214212.80
Angelos Stavrou3128898.69