Detecting peripheral-based attacks o...
SpringerLink (Online service)

 

  • Detecting peripheral-based attacks on the host memory[electronic resource] /
  • 紀錄類型: 書目-語言資料,印刷品 : Monograph/item
    杜威分類號: 005.84
    書名/作者: Detecting peripheral-based attacks on the host memory/ by Patrick Stewin.
    作者: Stewin, Patrick.
    出版者: Cham : : Springer International Publishing :, 2015.
    面頁冊數: xv, 108 p. : : ill. (some col.), digital ;; 24 cm.
    Contained By: Springer eBooks
    標題: Rootkits (Computer software)
    標題: Host-based intrusion detection systems (Computer security)
    標題: Computer peripherals - Security measures.
    標題: Engineering.
    標題: Communications Engineering, Networks.
    標題: Input/Output and Data Communications.
    標題: Systems and Data Security.
    ISBN: 9783319135151 (electronic bk.)
    ISBN: 9783319135144 (paper)
    內容註: Introduction -- Technical Background, Preliminaries and Assumptions -- Related Work -- Study of a Stealthy, Direct Memory Access based Malicious Software -- A Primitive for Detecting DMA Malware -- Authentic Reporting to External Platforms -- Conclusions and Future Work.
    摘要、提要註: This work addresses stealthy peripheral-based attacks on host computers and presents a new approach to detecting them. Peripherals can be regarded as separate systems that have a dedicated processor and dedicated runtime memory to handle their tasks. The book addresses the problem that peripherals generally communicate with the host via the host's main memory, storing cryptographic keys, passwords, opened files and other sensitive data in the process an aspect attackers are quick to exploit. Here, stealthy malicious software based on isolated micro-controllers is implemented to conduct an attack analysis, the results of which provide the basis for developing a novel runtime detector. The detector reveals stealthy peripheral-based attacks on the host's main memory by exploiting certain hardware properties, while a permanent and resource-efficient measurement strategy ensures that the detector is also capable of detecting transient attacks, which can otherwise succeed when the applied strategy only measures intermittently. Attackers exploit this strategy by attacking the system in between two measurements and erasing all traces of the attack before the system is measured again.
    電子資源: http://dx.doi.org/10.1007/978-3-319-13515-1
評論
Export
取書館別
 
 
變更密碼
登入