GHUMVEE: Efficient, effective, and flexible replication

GHUMVEE: Efficient, effective, and flexible replication

We present GHUMVEE, a multi-variant execution engine for software intrusion detection. GHUMVEE transparently executes and monitors diversified replicae of processes to thwart attacks relying on a predictable, single data layout. Unlike existing tools, GHUMVEE's interventions in the process'...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Volckaert, Stijn, De Sutter, Bjorn, De Baets, Tim, De Bosschere, Koen
Format: Tagungsbericht
Sprache:eng
Online-Zugang:Volltext
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
container_end_page 277
container_issue
container_start_page 261
container_title
container_volume 7743
creator Volckaert, Stijn
De Sutter, Bjorn
De Baets, Tim
De Bosschere, Koen
description We present GHUMVEE, a multi-variant execution engine for software intrusion detection. GHUMVEE transparently executes and monitors diversified replicae of processes to thwart attacks relying on a predictable, single data layout. Unlike existing tools, GHUMVEE's interventions in the process' execution are not limited to system call invocations. Because of that design decision, GHUMVEE can handle complex, multi-threaded real-life programs that display non-deterministic behavior as a result of non-deterministic thread scheduling and as a result of pointer-value dependent behavior. This capability is demonstrated on GUI programs from the Gnome and KDE desktop environments. © 2013 Springer-Verlag.
format Conference Proceeding
fullrecord <record><control><sourceid>kuleuven</sourceid><recordid>TN_cdi_kuleuven_dspace_123456789_626502</recordid><sourceformat>XML</sourceformat><sourcesystem>PC</sourcesystem><sourcerecordid>123456789_626502</sourcerecordid><originalsourceid>FETCH-kuleuven_dspace_123456789_6265023</originalsourceid><addsrcrecordid>eNqVirEOgjAUAJuoiUT5h24OQlJaaKmrQV3c1LVBeE2qTSW2ED5fBj9Ab7hbboZiKUrGc8pElkk-RxFhhKZS5GyJYu8fZKIsJ4kIiePper5V1Q5XWpvGgAsJBq2hCWaABNeuxdrCaO4W8Bs6a5o6mJdbo4WurYf42xXaHKrL_pQ-ewv9AE61vqsbUBllecFFKRWnvCCU_XNufztVGAP7AE-TReg</addsrcrecordid><sourcetype>Institutional Repository</sourcetype><iscdi>true</iscdi><recordtype>conference_proceeding</recordtype></control><display><type>conference_proceeding</type><title>GHUMVEE: Efficient, effective, and flexible replication</title><source>Lirias (KU Leuven Association)</source><source>Springer Books</source><creator>Volckaert, Stijn ; De Sutter, Bjorn ; De Baets, Tim ; De Bosschere, Koen</creator><contributor>Cuppens-Boulahia, Nora ; Cuppens, Frédéric ; García-Alfaro, Joaquín ; Miri, Ali ; Tawbi, Nadia</contributor><creatorcontrib>Volckaert, Stijn ; De Sutter, Bjorn ; De Baets, Tim ; De Bosschere, Koen ; Cuppens-Boulahia, Nora ; Cuppens, Frédéric ; García-Alfaro, Joaquín ; Miri, Ali ; Tawbi, Nadia</creatorcontrib><description>We present GHUMVEE, a multi-variant execution engine for software intrusion detection. GHUMVEE transparently executes and monitors diversified replicae of processes to thwart attacks relying on a predictable, single data layout. Unlike existing tools, GHUMVEE's interventions in the process' execution are not limited to system call invocations. Because of that design decision, GHUMVEE can handle complex, multi-threaded real-life programs that display non-deterministic behavior as a result of non-deterministic thread scheduling and as a result of pointer-value dependent behavior. This capability is demonstrated on GUI programs from the Gnome and KDE desktop environments. © 2013 Springer-Verlag.</description><identifier>ISSN: 0302-9743</identifier><identifier>ISBN: 9783642371196</identifier><identifier>ISBN: 3642371191</identifier><language>eng</language><publisher>Springer, Berlin, Heidelberg</publisher><ispartof>Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), 2012, Vol.7743, p.261-277</ispartof><lds50>peer_reviewed</lds50><oa>free_for_read</oa><woscitedreferencessubscribed>false</woscitedreferencessubscribed></display><links><openurl>$$Topenurl_article</openurl><openurlfulltext>$$Topenurlfull_article</openurlfulltext><thumbnail>$$Tsyndetics_thumb_exl</thumbnail><link.rule.ids>309,310,315,776,780,785,786,4036,4037,27837</link.rule.ids></links><search><contributor>Cuppens-Boulahia, Nora</contributor><contributor>Cuppens, Frédéric</contributor><contributor>García-Alfaro, Joaquín</contributor><contributor>Miri, Ali</contributor><contributor>Tawbi, Nadia</contributor><creatorcontrib>Volckaert, Stijn</creatorcontrib><creatorcontrib>De Sutter, Bjorn</creatorcontrib><creatorcontrib>De Baets, Tim</creatorcontrib><creatorcontrib>De Bosschere, Koen</creatorcontrib><title>GHUMVEE: Efficient, effective, and flexible replication</title><title>Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)</title><description>We present GHUMVEE, a multi-variant execution engine for software intrusion detection. GHUMVEE transparently executes and monitors diversified replicae of processes to thwart attacks relying on a predictable, single data layout. Unlike existing tools, GHUMVEE's interventions in the process' execution are not limited to system call invocations. Because of that design decision, GHUMVEE can handle complex, multi-threaded real-life programs that display non-deterministic behavior as a result of non-deterministic thread scheduling and as a result of pointer-value dependent behavior. This capability is demonstrated on GUI programs from the Gnome and KDE desktop environments. © 2013 Springer-Verlag.</description><issn>0302-9743</issn><isbn>9783642371196</isbn><isbn>3642371191</isbn><fulltext>true</fulltext><rsrctype>conference_proceeding</rsrctype><creationdate>2012</creationdate><recordtype>conference_proceeding</recordtype><sourceid>FZOIL</sourceid><recordid>eNqVirEOgjAUAJuoiUT5h24OQlJaaKmrQV3c1LVBeE2qTSW2ED5fBj9Ab7hbboZiKUrGc8pElkk-RxFhhKZS5GyJYu8fZKIsJ4kIiePper5V1Q5XWpvGgAsJBq2hCWaABNeuxdrCaO4W8Bs6a5o6mJdbo4WurYf42xXaHKrL_pQ-ewv9AE61vqsbUBllecFFKRWnvCCU_XNufztVGAP7AE-TReg</recordid><startdate>2012</startdate><enddate>2012</enddate><creator>Volckaert, Stijn</creator><creator>De Sutter, Bjorn</creator><creator>De Baets, Tim</creator><creator>De Bosschere, Koen</creator><general>Springer, Berlin, Heidelberg</general><scope>FZOIL</scope></search><sort><creationdate>2012</creationdate><title>GHUMVEE: Efficient, effective, and flexible replication</title><author>Volckaert, Stijn ; De Sutter, Bjorn ; De Baets, Tim ; De Bosschere, Koen</author></sort><facets><frbrtype>5</frbrtype><frbrgroupid>cdi_FETCH-kuleuven_dspace_123456789_6265023</frbrgroupid><rsrctype>conference_proceedings</rsrctype><prefilter>conference_proceedings</prefilter><language>eng</language><creationdate>2012</creationdate><toplevel>peer_reviewed</toplevel><toplevel>online_resources</toplevel><creatorcontrib>Volckaert, Stijn</creatorcontrib><creatorcontrib>De Sutter, Bjorn</creatorcontrib><creatorcontrib>De Baets, Tim</creatorcontrib><creatorcontrib>De Bosschere, Koen</creatorcontrib><collection>Lirias (KU Leuven Association)</collection></facets><delivery><delcategory>Remote Search Resource</delcategory><fulltext>fulltext</fulltext></delivery><addata><au>Volckaert, Stijn</au><au>De Sutter, Bjorn</au><au>De Baets, Tim</au><au>De Bosschere, Koen</au><au>Cuppens-Boulahia, Nora</au><au>Cuppens, Frédéric</au><au>García-Alfaro, Joaquín</au><au>Miri, Ali</au><au>Tawbi, Nadia</au><format>book</format><genre>proceeding</genre><ristype>CONF</ristype><atitle>GHUMVEE: Efficient, effective, and flexible replication</atitle><btitle>Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)</btitle><date>2012</date><risdate>2012</risdate><volume>7743</volume><spage>261</spage><epage>277</epage><pages>261-277</pages><issn>0302-9743</issn><isbn>9783642371196</isbn><isbn>3642371191</isbn><abstract>We present GHUMVEE, a multi-variant execution engine for software intrusion detection. GHUMVEE transparently executes and monitors diversified replicae of processes to thwart attacks relying on a predictable, single data layout. Unlike existing tools, GHUMVEE's interventions in the process' execution are not limited to system call invocations. Because of that design decision, GHUMVEE can handle complex, multi-threaded real-life programs that display non-deterministic behavior as a result of non-deterministic thread scheduling and as a result of pointer-value dependent behavior. This capability is demonstrated on GUI programs from the Gnome and KDE desktop environments. © 2013 Springer-Verlag.</abstract><pub>Springer, Berlin, Heidelberg</pub><oa>free_for_read</oa></addata></record>
fulltext fulltext
identifier ISSN: 0302-9743
ispartof Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), 2012, Vol.7743, p.261-277
issn 0302-9743
language eng
recordid cdi_kuleuven_dspace_123456789_626502
source Lirias (KU Leuven Association); Springer Books
title GHUMVEE: Efficient, effective, and flexible replication
url https://sfx.bib-bvb.de/sfx_tum?ctx_ver=Z39.88-2004&ctx_enc=info:ofi/enc:UTF-8&ctx_tim=2025-02-02T02%3A04%3A42IST&url_ver=Z39.88-2004&url_ctx_fmt=infofi/fmt:kev:mtx:ctx&rfr_id=info:sid/primo.exlibrisgroup.com:primo3-Article-kuleuven&rft_val_fmt=info:ofi/fmt:kev:mtx:book&rft.genre=proceeding&rft.atitle=GHUMVEE:%20Efficient,%20effective,%20and%20flexible%20replication&rft.btitle=Lecture%20Notes%20in%20Computer%20Science%20(including%20subseries%20Lecture%20Notes%20in%20Artificial%20Intelligence%20and%20Lecture%20Notes%20in%20Bioinformatics)&rft.au=Volckaert,%20Stijn&rft.date=2012&rft.volume=7743&rft.spage=261&rft.epage=277&rft.pages=261-277&rft.issn=0302-9743&rft.isbn=9783642371196&rft.isbn_list=3642371191&rft_id=info:doi/&rft_dat=%3Ckuleuven%3E123456789_626502%3C/kuleuven%3E%3Curl%3E%3C/url%3E&disable_directlink=true&sfx.directlink=off&sfx.report_link=0&rft_id=info:oai/&rft_id=info:pmid/&rfr_iscdi=true