Bryan D. Payne

Virtual Machine Introspection

Bryan D. Payne

us (code pays fourni par la source)

Gaps and Opportunities in Situational Awareness for Cybersecurity

Robert S. Gutzwiller, Josiah Dykstra, Bryan D. Payne

Demand is present among security practitioners for improving cyber situational awareness (SA), but capability and assessment have not risen to match. SA is an integral component of cybersecurity for everyone from individuals to business to response teams and threat exchanges. In this …

us (code pays fourni par la source)

High-Performance Memory Snapshotting for Real-Time, Consistent, Hypervisor-Based Monitors

Peter Klemperer, Hye Yoon Jeon, Bryan D. Payne, James C. Hoe

This paper presents a concurrent-computing approach-high-performance memory snapshotting-to improving security-introspection of virtual machine guest memory. Efficient introspection improves security monitoring in existing hypervisor systems with real-time, consistent memory introspection capabilities. Efficient introspection has three requirements that each must be met to provide …

us (code pays fourni par la source)

{PKI} at Scale Using Short-lived Certificates

Bryan D. Payne

us (code pays fourni par la source)

Evaluating Computer Intrusion Detection Systems

Aleksandar Milenkoski, Marco Paulo Amorim Vieira, Samuel Kounev, Alberto Avritzer et autres

The evaluation of computer intrusion detection systems (which we refer to as intrusion detection systems) is an active research area. In this article, we survey and systematize common practices in the area of evaluation of such systems. For this purpose, we define …

de, pt, us (code pays fourni par la source)

Evaluation of Intrusion Detection Systems in Virtualized Environments Using Attack Injection

Aleksandar Milenkoski, Bryan D. Payne, Nuno Antunes, Marco Paulo Amorim Vieira et autres

de, us, pt (code pays fourni par la source)

Scalability, fidelity and stealth in the DRAKVUF dynamic malware analysis system

Tamas K. Lengyel, Steve Maresca, Bryan D. Payne, George D. Webster et autres

Malware is one of the biggest security threats on the Internet today and deploying effective defensive solutions requires the rapid analysis of a continuously increasing number of malware samples. With the proliferation of metamorphic malware the analysis is further complicated as the …

se, gr (code pays fourni par la source)

Reducing the Cost of Security in the Cloud

Bryan D. Payne

When considering the economics of information security, people often use the information's value as input into an equation to determine how much to spend securing the corresponding system. Here, we explore how to improve the amount of security obtainable for a given …

Experience Report: An Analysis of Hypercall Handler Vulnerabilities

Aleksandar Milenkoski, Bryan D. Payne, Nuno Antunes, Marco Paulo Amorim Vieira et autres

Hypervisors are becoming increasingly ubiquitous with the growing proliferation of virtualized data centers. As a result, attackers are exploring vectors to attack hypervisors, against which an attack may be executed via several attack vectors such as device drivers, virtual machine exit events, …

de, pt (code pays fourni par la source)

Technical Information on Vulnerabilities of Hypercall Handlers

Aleksandar Milenkoski, Marco Paulo Amorim Vieira, Bryan D. Payne, Nuno Antunes et autres

Modern virtualized service infrastructures expose attack vectors that enable attacks of high severity, such as attacks targeting hypervisors. A malicious user of a guest VM (virtual machine) may execute an attack against the underlying hypervisor via hypercalls, which are software traps from …

Gyrus: A Framework for User-Intent Monitoring of Text-Based Networked Applications

Yeongjin Jang, Simon Pak Ho Chung, Bryan D. Payne, Wenke Lee

Author(s): Yeongjin Jang, Simon P. Chung, Bryan D. Payne, Wenke Lee Download: Paper (PDF) Date: 22 Feb 2014 Document Type: Briefing Papers Additional Documents: Slides Associated Event: NDSS Symposium 2014 Abstract: We propose a security system called Gyrus that guarantees a system’s …

us (code pays fourni par la source)

Simplifying virtual machine introspection using LibVMI

Bryan D. Payne

Ensuring the security of a computer system requires the careful integration of many components.Key among these is security monitoring.Recent research trends show an increasing acceptance of external host-based monitoring techniques such as virtual machine introspection (VMI), a technique for viewing the runtime …

us (code pays fourni par la source)