Intrusion Recovery Using Selective Re-execution
RETRO repairs a desktop or server after an adversary compromises it, by undoing the adversary's changes while preserving legitimate user actions, with minimal user involvement. During normal operation, RETRO records an action history graph, which is a detailed dependency graph describing the sy...
Main Authors: | , , , |
---|---|
Other Authors: | |
Format: | Article |
Language: | English |
Published: |
USENIX Association,
2011-03-15T14:13:18Z.
|
Subjects: | |
Online Access: | Get fulltext |