Name
Abstract | ||
|---|---|---|
Despite the growing attention to security concerns and advances in code verification tools, many memory errors still escape testing and plague production applications with security vulnerabilities. We present RCORE, an efficient dynamic program monitoring infrastructure to perform automated security vulnerability monitoring. Our approach is to perform extensive static analysis at compile time to automatically index program state invariants (PSIs). At runtime, our novel dynamic analysis continuously inspects the program state and produces a report when PSI violations are found. Our technique retrofits existing applications and is designed for both offline and production runs. To avoid slowing down production applications, we can perform our dynamic analysis on idle cores to detect suspicious behavior in the background. The alerts raised by our analysis are symptoms of memory corruption or other—potentially exploitable—dangerous behavior. Our experimental evaluation confirms that RCORE can report on several classes of vulnerabilities with very low overhead. |
Year | DOI | Venue |
|---|---|---|
2013 | 10.1109/DSN.2013.6575318 | Dependable Systems and Networks |
Keywords | Field | DocType |
program diagnostics,program testing,program verification,security of data,software maintenance,RCORE,automated security vulnerability monitoring,automatically index PSI,code verification tool,dynamic analysis,dynamic program monitoring infrastructure,extensive static analysis,memory corruption,memory error,program state inspection,program state invariant,retrofit,Memory Errors,Program State Invariants,Systems Security,Vulnerability Analysis | Vulnerability (computing),Computer security,Memory corruption,Compile time,Vulnerability assessment,Computer science,Static analysis,Real-time computing,Memory management,Software maintenance,Memory errors,Distributed computing | Conference |
ISSN | ISBN | Citations |
1530-0889 | 978-1-4673-6471-3 | 5 |
PageRank | References | Authors |
0.39 | 39 | 3 |
Name | Order | Citations | PageRank |
|---|---|---|---|
| Cristiano Giuffrida | 1 | 876 | 49.61 |
| Lorenzo Cavallaro | 2 | 886 | 52.85 |
| Andrew S. Tanenbaum | 3 | 3803 | 745.87 |