亞洲知識產權資訊網為知識產權業界提供一個一站式網上交易平台，協助業界發掘知識產權貿易商機，並與環球知識產權業界建立聯繫。無論你是知識產權擁有者正在出售您的知識產權，或是製造商需要購買技術以提高操作效能，又或是知識產權配套服務供應商，你將會從本網站發掘到有用的知識產權貿易資訊。

返回搜索結果

Software attack protection and recovery via transactional application self-healing

總結: Lead Inventors: Angelos D. Keromytis, Ph.D.; Michael E. LocastoProblem or Unmet Need:Although computer defense systems for detecting attacks on software applications exist, they are currently unable to take any remedial action once an executing application's state is modified by an attack. In order to prevent exploitation of an attacked application, most defense systems terminate execution of the attacked application process. This mechanism reduces the availability of the application and risks losing ongoing work performed by the software at the time of the attack. Introducing self-healing mechanisms to software that would enable applications to safely continue execution after an attack could limit the extent to which attackers can interrupt normal application use without compromising system security. Details of the Invention:The technology is a method for preventing a software application from crashing due to an external attack or internal fault. The technology supervises an executing application to detect attacks or faults and applies integrity repair policies via dynamic rewriting of the application's executing routines to enable the application to continue normal execution after an attack or fault.

技術優勢: • The technology does not require that an application's source code be modified in order to be protected. It therefore can be used with commercial or proprietary applications for which the source code is not readily available. Software vendors also do not need to modify their products in order to take advantage of the technology.• Unlike systems that can only detect and prevent attacks against software, the technology also provides self-healing features that can prevent software from crashing or being terminated in response to an attack; software protected by the technology therefore does not need to be restarted after an attack.• In order to reduce the performance penalty of supervised execution, the technology can be configured to selectively supervise specified portions of an application.

技術應用: • The technology can reduce the likelihood of software crashes in high-availability and mission-critical scenarios.

詳細技術說明: The technology is a method for preventing a software application from crashing due to an external attack or internal fault. The technology supervises an executing application to detect attacks or faults and applies integrity repair policies via dynam...

*Inquiry: Calvin ChuColumbia Technology VenturesTel: (212) 854-8444Email: TechTransfer@columbia.edu

*Publications: From STEM to SEAD: Speculative Execution for Automated Defence, M.E. Locasto, A. Stavrou, G.F. Cretu, A.D. Keromytis, Proc. of USENIX ATC 2007, Jun. 2007, Santa Clara, CA, pp. 219-232.

欲了解更多信息，請點擊這裡