Mvedsua

Pina, Luís; Andronidis, Anastasios; Hicks, Michael; Cadar, Cristian

doi:10.1145/3297858.3304063

Cited by 22 publications

(2 citation statements)

References 38 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Lastly, we believe that process rewriting can be a general technique to solve other security and system problems, such as dynamically enabling/disabling seccomp filtering [24], live code rerandomization [64], dynamic software update [40,42], and crossarchitecture process migration and execution randomization [55,60], among others. Process rewriting allows dynamically transforming the process state and memory layout from outside of the target process, preventing the transformation logic from being hijacked [64].…”

Section: Discussion and Future Workmentioning

confidence: 99%

See 1 more Smart Citation

DynaCut

Mahurkar,

Wang,

Zhang

et al. 2023

Proceedings of the 24th International Middleware Conference on ZZZ

View full text Add to dashboard Cite

Software is becoming increasingly complex and feature-rich, yet only part of any given codebase is frequently used. Existing software customization and debloating approaches target static binaries, focusing on feature discovery, control-flow analysis, and binary rewriting. As a result, the customized program binary has a smaller attack surface as well as less available functionality. This means that once a software's use scenario changes, the customized binary may not be usable.This paper presents DynaCut, for dynamic software code customization. DynaCut can disable "not being used" code features during software runtime and re-enable them when required again. DynaCut works at the binary level; no source code is needed. To achieve its goal, DynaCut includes a dynamic process rewriting technique that seamlessly and transparently updates the image of a running process, with specific code features blocked or re-enabled. To help identify potentially unused code, DynaCut employs an execution trace-based differential analysis to pinpoint the code related to specific software features, which can be dynamically turned on/off based on user configuration. We also develop automatic methods to locate code that is only temporally used (e.g., initialization code), which can be dropped in a timely manner (e.g., after the initialization phase).We prototype DynaCut and evaluate it using 3 widely used server applications and the SPECint2017_speed benchmark suite. The result shows that, compared to existing static binary customization approaches, DynaCut removes an additional 10% of code on average and up to 56% of temporally executed code due to the dynamic code customization. * A. Mahurkar and X. Wang made equal contributions to this work. Most of X. Wang's work was done while he was at Virginia Tech.† Most of H. Zhang's work was done while he was at Georgia Tech.

show abstract

Section: Discussion and Future Workmentioning

confidence: 99%

“…Dynamic software patching (software repair) is another way to fix vulnerable code without stopping the process [27,40,42,43]. Ginseng [40] uses a source-to-source compiler to generate update-able code and redirects function calls at runtime to make the updated code live.…”

Section: Related Workmentioning

confidence: 99%

DynaCut

Mahurkar,

Wang,

Zhang

et al. 2023

Proceedings of the 24th International Middleware Conference on ZZZ

View full text Add to dashboard Cite

show abstract

Distributed Heterogeneous N-Variant Execution

Voulimeneas

Song

Parzefall

et al. 2020

Lecture Notes in Computer Science

View full text Add to dashboard Cite

N-Variant Execution (NVX) systems utilize artificial diversity techniques to enhance software security. The general idea is to run multiple different variants of the same program alongside each other while monitoring their diverging behavior on a malicious input. Existing NVX systems execute diversified program variants on a single host. This means the level of inter-variant diversity will be limited to what a single platform can offer, without costly emulation. This paper presents DMON, a novel distributed NVX design that executes native program variants across multiple heterogeneous hosts. Our approach greatly increases the level of diversity between the simultaneously running variants that can be supported, encompassing different ISAs and ABIs. Our evaluation shows that DMON can provide comparable performance to traditional, nondistributed NVX systems, while enhancing security.

show abstract

Differential Monitoring

Muehlboeck¹,

Henzinger²

2021

Runtime Verification

View full text Add to dashboard Cite

Mvedsua

Cited by 22 publications

References 38 publications

DynaCut

DynaCut

Distributed Heterogeneous N-Variant Execution

Differential Monitoring

Contact Info

Product

Resources

About