國立高雄大學圖資館 |

Language: English

Back

Detecting peripheral-based attacks o...

SpringerLink (Online service)

Detecting peripheral-based attacks on the host memory

Record Type:	Electronic resources : Monograph/item
Title/Author:	Detecting peripheral-based attacks on the host memoryby Patrick Stewin.
Author:	Stewin, Patrick.
Published:	Cham :Springer International Publishing :2015.
Description:	xv, 108 p. :ill. (some col.), digital ;24 cm.
Contained By:	Springer eBooks
Subject:	Rootkits (Computer software)
Online resource:	http://dx.doi.org/10.1007/978-3-319-13515-1
ISBN:	9783319135151 (electronic bk.)

Detecting peripheral-based attacks on the host memory
Stewin, Patrick.

Detecting peripheral-based attacks on the host memory[electronic resource] /by Patrick Stewin. - Cham :Springer International Publishing :2015. - xv, 108 p. :ill. (some col.), digital ;24 cm. - T-Labs series in telecommunication services,2192-2810. - T-Labs series in telecommunication services..

Introduction -- Technical Background, Preliminaries and Assumptions -- Related Work -- Study of a Stealthy, Direct Memory Access based Malicious Software -- A Primitive for Detecting DMA Malware -- Authentic Reporting to External Platforms -- Conclusions and Future Work.

This work addresses stealthy peripheral-based attacks on host computers and presents a new approach to detecting them. Peripherals can be regarded as separate systems that have a dedicated processor and dedicated runtime memory to handle their tasks. The book addresses the problem that peripherals generally communicate with the host via the host's main memory, storing cryptographic keys, passwords, opened files and other sensitive data in the process an aspect attackers are quick to exploit. Here, stealthy malicious software based on isolated micro-controllers is implemented to conduct an attack analysis, the results of which provide the basis for developing a novel runtime detector. The detector reveals stealthy peripheral-based attacks on the host's main memory by exploiting certain hardware properties, while a permanent and resource-efficient measurement strategy ensures that the detector is also capable of detecting transient attacks, which can otherwise succeed when the applied strategy only measures intermittently. Attackers exploit this strategy by attacking the system in between two measurements and erasing all traces of the attack before the system is measured again.

ISBN: 9783319135151 (electronic bk.)

Standard No.: 10.1007/978-3-319-13515-1doiSubjects--Topical Terms:

647216
Rootkits (Computer software)

LC Class. No.: QA76.9.A25

Dewey Class. No.: 005.84

Detecting peripheral-based attacks on the host memory
LDR:02470nmm a2200325 a 4500 001 461098
003 DE-He213
005 20150807141057.0
006 m d
007 cr nn 008maaau
008 151110s2015 gw s 0 eng d
020 $a 9783319135151 (electronic bk.)
020 $a 9783319135144 (paper)
024 7 $a 10.1007/978-3-319-13515-1 $2 doi
035 $a 978-3-319-13515-1
040 $a GP $c GP
041 0 $a eng
050 4 $a QA76.9.A25
072 7 $a TJK $2 bicssc
072 7 $a TEC041000 $2 bisacsh
082 0 4 $a 005.84 $2 23
090 $a QA76.9.A25 $b S852 2015
100 1 $a Stewin, Patrick. $3 712989
245 1 0 $a Detecting peripheral-based attacks on the host memory $h [electronic resource] / $c by Patrick Stewin.
260 $a Cham : $b Springer International Publishing : $b Imprint: Springer, $c 2015.
300 $a xv, 108 p. : $b ill. (some col.), digital ; $c 24 cm.
490 1 $a T-Labs series in telecommunication services, $x 2192-2810
505 0 $a Introduction -- Technical Background, Preliminaries and Assumptions -- Related Work -- Study of a Stealthy, Direct Memory Access based Malicious Software -- A Primitive for Detecting DMA Malware -- Authentic Reporting to External Platforms -- Conclusions and Future Work.
520 $a This work addresses stealthy peripheral-based attacks on host computers and presents a new approach to detecting them. Peripherals can be regarded as separate systems that have a dedicated processor and dedicated runtime memory to handle their tasks. The book addresses the problem that peripherals generally communicate with the host via the host's main memory, storing cryptographic keys, passwords, opened files and other sensitive data in the process an aspect attackers are quick to exploit. Here, stealthy malicious software based on isolated micro-controllers is implemented to conduct an attack analysis, the results of which provide the basis for developing a novel runtime detector. The detector reveals stealthy peripheral-based attacks on the host's main memory by exploiting certain hardware properties, while a permanent and resource-efficient measurement strategy ensures that the detector is also capable of detecting transient attacks, which can otherwise succeed when the applied strategy only measures intermittently. Attackers exploit this strategy by attacking the system in between two measurements and erasing all traces of the attack before the system is measured again.
650 0 $a Rootkits (Computer software) $3 647216
650 0 $a Host-based intrusion detection systems (Computer security) $3 712990
650 0 $a Computer peripherals $x Security measures. $3 712991
650 1 4 $a Engineering. $3 210888
650 2 4 $a Communications Engineering, Networks. $3 273745
650 2 4 $a Input/Output and Data Communications. $3 274473
650 2 4 $a Systems and Data Security. $3 274481
710 2 $a SpringerLink (Online service) $3 273601
773 0 $t Springer eBooks
830 0 $a T-Labs series in telecommunication services. $3 559885
856 4 0 $u http://dx.doi.org/10.1007/978-3-319-13515-1
950 $a Engineering (Springer-11647)