Abstract:Host security is achieved by securing both the operating system kernel and the privileged applications that run on top of it. Application-level bugs are more frequent than kernel-level bugs, and, therefore, applications are often the means to compromise the security of a system. Detecting these attacks can be difficult, especially in the case of attacks that exploit application-logic errors. These attacks seldom exhibit characterizing patterns as in the case of buffer overflows and format string attacks. In addition, the data used by intrusion detection systems is either too low-level, as in the case of system calls, or incomplete, as in the case of syslog entries. This paper presents a technique to enforce nonbypassable, application-level auditing that does not require the recompilation of legacy systems. The technique is implemented as a kernel-level component, a privileged daemon, and an offline language tool. The technique uses binary rewriting to instrument applications so that meaningful and complete audit information can be extracted. This information is then matched against application-specific signatures to detect attacks that exploit application-logic errors. The technique has been successfully applied to detect attacks against widely-deployed applications, including the Apache Web server and the OpenSSH server.

DESIGN AND IMPLEMENTATION OF SECURITY AUDITING SYSTEM FOR LINUX SERVER

Enhancement of Auditing in Linux

Design and Implementation on Network Monitor and Audit System of Large Scale and Multiple Users

Research on Information Security Model and Security System Design

RESEARCH AND IMPLEMENTATION OF SECURITY KERNEL SYSTEM FOR SERVER SYSTEM

Design And Realization Of Network Security Audit And Monitoring System

An Enhanced Security Auditing Mechanism for Linux

Implementation of Power System Real Time Dynamic Security Assessment and Early Warning System

A Unix Security Auditing System Based on Dynamic Tracing

Security Test of Auditing Function based on Android Mobile Intelligent Terminal OS

The Application of Saftey Audit and Monitor Technology in Power Management.

Implementation of a power system dynamic security assessment and early warning system

Research on Hardware Automatic Inspection System of Computer Big Data Server.

Design and Implementation of Code Security Inspection System Based on SVN

On the Review and Setup of Security Audit using Kali Linux

Research and Design on Security Audit System Based on Cloud Computing

The design and implementation of security analysis terminal for WLAN

Design and Application of a Software in Medical Equipment Detecting and Risk Assessment

Detecting Attacks That Exploit Application-Logic Errors Through Application-Level Auditing.

Design and Implementation of Confidential Computer Monitor & Audit System

Design and Research of Security Architecture for Video Surveillance System