Intrusion Recovery Using Selective Re-execution

RETRO repairs a desktop or server after an adversary compromises it, by undoing the adversary's changes while preserving legitimate user actions, with minimal user involvement. During normal operation, RETRO records an action history graph, which is a detailed dependency graph describing the sy...

Full description

Bibliographic Details
Main Authors: Kim, Taesoo (Contributor), Wang, Xi (Contributor), Zeldovich, Nickolai (Contributor), Kaashoek, M. Frans (Contributor)
Other Authors: Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science (Contributor)
Format: Article
Language:English
Published: USENIX Association, 2011-03-15T14:13:18Z.
Subjects:
Online Access:Get fulltext