Kruiser: Semi-synchronized Non-blocking Concurrent Kernel Heap Buffer Overflow Monitoring

Donghai Tian; Qiang Zeng; Dinghao Wu; Peng Liu; Changzhen Hu

Kruiser: Semi-synchronized Non-blocking Concurrent Kernel Heap Buffer Overflow Monitoring

Donghai Tian
, Qiang Zeng
, Dinghao Wu
, Peng Liu
, Changzhen Hu

Pennsylvania State University

Research output: Contribution to conference › Paper › peer-review

20 Citations (Scopus)

Abstract

• Kruiser can achieve concurrent monitoring against kernel heap buffer overflows. • Non-blocking • Semi-synchronized • NO false positive • The hybrid VM monitoring scheme provides high efficiency without sacrificing the security guarantees.

Original language	English
Publication status	Published - 2012
Event	19th Annual Network and Distributed System Security Symposium, NDSS 2012 - San Diego, United States Duration: 5 Feb 2012 → 8 Feb 2012

Conference

Conference	19th Annual Network and Distributed System Security Symposium, NDSS 2012
Country/Territory	United States
City	San Diego
Period	5/02/12 → 8/02/12

Cite this

@conference{a7e1d50fff9d40798702fc2bd8143397,

title = "Kruiser: Semi-synchronized Non-blocking Concurrent Kernel Heap Buffer Overflow Monitoring",

abstract = "• Kruiser can achieve concurrent monitoring against kernel heap buffer overflows. • Non-blocking • Semi-synchronized • NO false positive • The hybrid VM monitoring scheme provides high efficiency without sacrificing the security guarantees.",

author = "Donghai Tian and Qiang Zeng and Dinghao Wu and Peng Liu and Changzhen Hu",

note = "Publisher Copyright: {\textcopyright} NDSS 2012.All rights reserved.; 19th Annual Network and Distributed System Security Symposium, NDSS 2012 ; Conference date: 05-02-2012 Through 08-02-2012",

year = "2012",

language = "English",

}

TY - CONF

T1 - Kruiser

T2 - 19th Annual Network and Distributed System Security Symposium, NDSS 2012

AU - Tian, Donghai

AU - Zeng, Qiang

AU - Wu, Dinghao

AU - Liu, Peng

AU - Hu, Changzhen

PY - 2012

Y1 - 2012

N2 - • Kruiser can achieve concurrent monitoring against kernel heap buffer overflows. • Non-blocking • Semi-synchronized • NO false positive • The hybrid VM monitoring scheme provides high efficiency without sacrificing the security guarantees.

AB - • Kruiser can achieve concurrent monitoring against kernel heap buffer overflows. • Non-blocking • Semi-synchronized • NO false positive • The hybrid VM monitoring scheme provides high efficiency without sacrificing the security guarantees.

UR - https://www.scopus.com/pages/publications/85180784686

M3 - Paper

AN - SCOPUS:85180784686

Y2 - 5 February 2012 through 8 February 2012

ER -

Kruiser: Semi-synchronized Non-blocking Concurrent Kernel Heap Buffer Overflow Monitoring

Abstract

Conference

Other files and links

Fingerprint

Cite this