检索结果-内蒙古大学图书馆

Survivability Analysis of K-Variant Architecture for Different memory attacks and Defense Strategies

IEEE TRANSACTIONS ON DEPENDABLE AND SECURE COMPUTING 2021年第4期18卷 1868-1881页

作者： Bekiroglu, Berk Korel, Bogdan IIT Dept Comp Sci Chicago IL 60616 USA

Many systems require high security during a limited operational timeframe. These systems can be exposed to many attacks that prevent tasks from being completed. To reduce the chances of a successful attack and increase the security of these systems, many fault tolerance architectures and defense strategies have been developed. N-version architecture is one technique to improve reliability and security. In this architecture, functionally equivalent variants of a program are developed and executed concurrently. However, due to the high cost of developing and maintaining N versions, it is used for large budget projects. In this paper, an alternative approach to improve security is K-variant architecture. By applying safe and automated program transformations, functionally equivalent variants of the original program are generated. The goal is to shift vulnerabilities in variants into different locations. These variants are executed simultaneously to complete a task so that the chance of a successful exploitation attack is decreased. In this paper, several types of memory exploitation attacks are analyzed along with the proposed four defense strategies. The experimental study investigates the effectiveness of defense strategies against these attacks. The results suggest that K-variant architecture with the proposed defense strategies may significantly improve the security of systems.

关键词： Security Buffer overflows memory architecture Reliability Task analysis Analytical models Attack survivability source code transformation N-version architecture k-variant architecture memory exploitation attacks defense strategies

来源：评论

学校读者我要写书评

暂无评论

Neural Network-based Tool for Survivability Assessment of K-variant Systems

引用

INTERNATIONAL JOURNAL ON ARTIFICIAL INTELLIGENCE TOOLS 2023年第4期32卷 2350049-2350049页

作者： Bekiroglu, Berk Korel, Bogdan IIT Dept Comp Sci 10 West 31st St Chicago IL 60616 USA

The K-variant is a multi-variant architecture to enhance the security of the time-bounded mission and safety-critical systems. Variants in the K-variant architecture are generated by controlled source program transformations. Previous experimental studies showed that the K-variant architecture might improve the security of systems against memory exploitation attacks. In order to estimate the survivability of K-variant systems, simulation techniques are utilized. However, these techniques are slow and may not be practical for the design of K-variant systems. Therefore, fast and highly accurate estimations of the survivability of K-variant systems are necessary for developers. The neural networks may allow quick and accurate estimation of the survivability of K-variant systems. The developed neural network-based tool can make quick and precise estimations of the survivability of K-variant systems under different conditions. In this paper, the accuracy of the neural network-based tool is investigated in an experimental study. The neural network-based tool estimations are compared with a K-variant attack emulator in three programs for up to ten variant systems under four attack types and three attack durations. The experimental study demonstrates that the neural network-based tool makes fast and accurate estimations of the survivability of K-variant systems under all the conditions investigated.

关键词： K-variant systems system design with neural networks memory exploitation attacks

来源：评论

学校读者我要写书评

暂无评论

Source Code Transformations for Improving Security of Time-bounded K-variant Systems

引用

INFORMATION AND SOFTWARE TECHNOLOGY 2021年 137卷 106601-106601页

作者： Bekiroglu, Berk Korel, Bogdan IIT Chicago IL 60616 USA

Context: Source code transformation techniques can improve the security of systems against memory exploitation attacks. As such, the chance of exploitation of security vulnerabilities can be decreased by using different controlled source code transformation techniques. In K-variant architecture, multiple variants of a program are generated through a controlled source code transformation to improve the security of systems. Objective: To investigate the effectiveness and practicality of source code program transformations in improving the security of time-bounded K-variant systems for memory exploitation attacks. Method: The effectiveness of program transformations in improving the security of time-bounded K-variant systems is experimentally investigated for different memory attacks. Results: The results suggest that generating multiple variants using the presented transformations significantly improves the survivability of time-bounded K-variant systems under memory exploitation attacks. Conclusion: We conclude that generating multi-variants in time-bounded K-variant systems in accordance with the presented program transformations may improve the security of time-bounded K-variant systems significantly for memory exploitation attacks with a reasonable cost and overhead.

关键词： K-variant architecture System security Multiple variant architecture Source code transformation memory exploitation attacks

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：