亚洲知识产权资讯网为知识产权业界提供一个一站式网上交易平台，协助业界发掘知识产权贸易商机，并与环球知识产权业界建立联系。无论你是知识产权拥有者正在出售您的知识产权，或是制造商需要购买技术以提高操作效能，又或是知识产权配套服务供应商，你将会从本网站发掘到有用的知识产权贸易资讯。

返回搜索结果

Software attack protection and recovery via transactional application self-healing

总结: Lead Inventors: Angelos D. Keromytis, Ph.D.; Michael E. LocastoProblem or Unmet Need:Although computer defense systems for detecting attacks on software applications exist, they are currently unable to take any remedial action once an executing application's state is modified by an attack. In order to prevent exploitation of an attacked application, most defense systems terminate execution of the attacked application process. This mechanism reduces the availability of the application and risks losing ongoing work performed by the software at the time of the attack. Introducing self-healing mechanisms to software that would enable applications to safely continue execution after an attack could limit the extent to which attackers can interrupt normal application use without compromising system security. Details of the Invention:The technology is a method for preventing a software application from crashing due to an external attack or internal fault. The technology supervises an executing application to detect attacks or faults and applies integrity repair policies via dynamic rewriting of the application's executing routines to enable the application to continue normal execution after an attack or fault.

技术优势: • The technology does not require that an application's source code be modified in order to be protected. It therefore can be used with commercial or proprietary applications for which the source code is not readily available. Software vendors also do not need to modify their products in order to take advantage of the technology.• Unlike systems that can only detect and prevent attacks against software, the technology also provides self-healing features that can prevent software from crashing or being terminated in response to an attack; software protected by the technology therefore does not need to be restarted after an attack.• In order to reduce the performance penalty of supervised execution, the technology can be configured to selectively supervise specified portions of an application.

技术应用: • The technology can reduce the likelihood of software crashes in high-availability and mission-critical scenarios.

详细技术说明: The technology is a method for preventing a software application from crashing due to an external attack or internal fault. The technology supervises an executing application to detect attacks or faults and applies integrity repair policies via dynam...

*Inquiry: Calvin ChuColumbia Technology VenturesTel: (212) 854-8444Email: TechTransfer@columbia.edu

*Publications: From STEM to SEAD: Speculative Execution for Automated Defence, M.E. Locasto, A. Stavrou, G.F. Cretu, A.D. Keromytis, Proc. of USENIX ATC 2007, Jun. 2007, Santa Clara, CA, pp. 219-232.

欲了解更多信息，请点击这里