Logging to the Danger Zone: Race Condition Attacks and Defenses on System Audit Frameworks-Reference-Cited by-同舟云学术

Logging to the Danger Zone: Race Condition Attacks and Defenses on System Audit Frameworks

Published:2020-10-30 Issue: Volume: Page:
ISSN:
Container-title:Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security
language:
Short-container-title:

Author:

Paccagnella Riccardo¹,Liao Kevin¹,Tian Dave²,Bates Adam¹

Affiliation:

1. University of Illinois at Urbana-Champaign, Urbana, IL, USA

2. Purdue University, West Lafayette, IN, USA

Funder

National Science Foundation

Publisher

ACM

Link

https://dl.acm.org/doi/pdf/10.1145/3372297.3417862

Reference124 articles.

1. 2014. CVE-2014-6271. Vulnerability reference:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6271. Accessed on 08.17.2020. 2014. CVE-2014-6271. Vulnerability reference:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6271. Accessed on 08.17.2020.

2. 2017. CVE-2017-16995. Vulnerability reference:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16995. Accessed on 08.17.2020. 2017. CVE-2017-16995. Vulnerability reference:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16995. Accessed on 08.17.2020.

3. Airbus Commercial Aircraft. 2020. Forward integrity and confidentiality of logs - syslog-ng/syslog-ng. https://github.com/syslog-ng/syslog-ng/pull/3121. Accessed on 08.17.2020. Airbus Commercial Aircraft. 2020. Forward integrity and confidentiality of logs - syslog-ng/syslog-ng. https://github.com/syslog-ng/syslog-ng/pull/3121. Accessed on 08.17.2020.

4. AT&T Cybersecurity. [n.d.]. PCI DSS log management & monitoring. https://cybersecurity.att.com/solutions/pci-dss-log-management-monitoring. Accessed on 08.17.2020. AT&T Cybersecurity. [n.d.]. PCI DSS log management & monitoring. https://cybersecurity.att.com/solutions/pci-dss-log-management-monitoring. Accessed on 08.17.2020.

Cited by 25 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. Log refusion: adversarial attacks against the integrity of application logs and defense methods;SCIENTIA SINICA Informationis;2024-09-01

2. R-CAID: Embedding Root Cause Analysis within Provenance-based Intrusion Detection;2024 IEEE Symposium on Security and Privacy (SP);2024-05-19

3. eAudit: A Fast, Scalable and Deployable Audit Data Collection System^*;2024 IEEE Symposium on Security and Privacy (SP);2024-05-19

4. Kairos: Practical Intrusion Detection and Investigation using Whole-system Provenance;2024 IEEE Symposium on Security and Privacy (SP);2024-05-19

5. TEE-PA: TEE Is a Cornerstone for Remote Provenance Auditing on Edge Devices With Semi-TCB;IEEE Access;2024