Server protection through dynamic patching - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2005

Server protection through dynamic patching

Abstract

Recently, hackers has been developing fast propagat- ing worms exploiting vulnerabilities that had just been dis- closed by security experts. Those attacks particularly ex- pose servers: this class of applications is constantly con- nected to the Internet and must meet uptime constraints. Hence they often run unprotected until the next scheduled update. In this paper, we propose a just-in-time protection for servers based on runtime injection of pre-made patches. The runtime injection permits to deal with uptime con- straints and induces only a minimal overhead over the vul- nerable code and only when a vulnerability is known to ex- ist. The pre-made patches forbid exploitation of most com- mon vulnerabilities (45% of attacks reported by Debian se- curity in 2005 affecting C softwares) and allows continuous servicing.
Fichier principal
Vignette du fichier
loriant.prdc05.pdf (158.85 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

inria-00441360 , version 1 (15-12-2009)

Identifiers

  • HAL Id : inria-00441360 , version 1

Cite

Nicolas Loriant, Marc Ségura-Devillechaise, Jean-Marc Menaud. Server protection through dynamic patching. 11th IEEE Pacific Rim International Symposium on Dependable Computing, Dec 2005, Changsha, China. ⟨inria-00441360⟩
113 View
188 Download

Share

Gmail Facebook Twitter LinkedIn More