Tachyon: Tandem Execution for Efficient Live Patch Testing
Tachyon: Tandem Execution for Efficient Live Patch Testing
复制标题
Tachyon：用于高效实时补丁测试的串联执行
DOI：
--
复制
发表时间：
2012
期刊：
影响因子：
--
通讯作者：
David Brumley
中科院分区：
文献类型：
--
作者：
Matthew Maurer;David Brumley
大量的安全事件是由针对已经可用的补丁程序的漏洞的利用引起的，但是该用户根本没有安装。补丁安装通常会延迟，因为必须手动测试补丁，以确保它们不会引入问题，尤其是在企业级别。
在本文中，我们提出了一种新的串联执行方法，用于自动补丁测试。我们的方法基于补丁执行一致性模型，该模型坚持认为，如果执行前和patch程序的执行仅在攻击输入上有所不同，则可以安全应用。串联执行同时运行前和斑点后程序，以检查执行一致性。我们已经在Tachyon中实施了我们的技术，这是一种在Linux中在线补丁测试的系统。 Tachyon能够在无源访问的情况下自动检查和验证补丁程序。
The vast number of security incidents are caused by exploits against vulnerabilities for which a patch is already available, but that users simply did not install. Patch installation is often delayed because patches must be tested manually to make sure they do not introduce problems, especially at the enterprise level.
In this paper we propose a new tandem execution approach for automated patch testing. Our approach is based on a patch execution consistency model which maintains that a patch is safe to apply if the executions of the pre and post-patch program only differ on attack inputs. Tandem execution runs both pre and post-patch programs simultaneously in order to check for execution consistency. We have implemented our techniques in TACHYON, a system for online patch testing in Linux. TACHYON is able to automatically check and verify patches without source access.