论文标题
无限的生命：安全的内部回滚与孤立的域
Unlimited Lives: Secure In-Process Rollback with Isolated Domains
论文作者
论文摘要
使用不安全的编程语言仍然是软件漏洞的主要根本原因之一。尽管存在检测和减轻与内存安全性问题的众所周知的防御能力，但它们并未应对软件弹性的挑战，即，在受到恶意输入时，受攻击系统是否可以继续执行其功能。我们建议将隔离域的安全回滚作为提高运行时攻击针对的软件的弹性的有效且安全的方法。我们通过实现用于安全域回滚（SDROB）的软件库，并演示如何将SDROB应用于现实世界软件，以显示我们方法论的实用性。
The use of unsafe programming languages still remains one of the major root causes of software vulnerabilities. Although well-known defenses that detect and mitigate memory-safety related issues exist, they don't address the challenge of software resilience, i.e., whether a system under attack can continue to carry out its function when subjected to malicious input. We propose secure rollback of isolated domains as an efficient and secure method of improving the resilience of software targeted by run-time attacks. We show the practicability of our methodology by realizing a software library for Secure Domain Rollback (SDRoB) and demonstrate how SDRoB can be applied to real-world software.
