TC: Medium: Exploiting Multicore and Hardware Acceleration to Perform Efficient Behavior-Based Attack Detection and Repair

本研究探讨了有效检测针对用户系统上未知漏洞的第一次利用，然后安全地修复系统免受进一步攻击的技术。该研究使用动态分析——在代码执行时监视代码的能力——因为它可以用于检查实际执行的安全性和安全性属性，并确保执行的每个步骤都是安全的。然而，现有的动态分析技术对于最终用户来说太慢了，而且目前不能帮助用户系统自我修复。本研究通过开发有效的动态分析技术来研究克服这些限制的技术，以及诊断被利用漏洞的根本原因、修复所造成的损害和保护系统免受进一步攻击的技术。

This research investigates techniques to efficiently detect the first exploit against an unknown vulnerability on a user system, and then safely heal the system against further attacks. The research uses dynamic analysis -- the ability to monitor code as it executes -- because it can be used to check safety and security properties of actual executions and make sure that each step of the execution is safe. However, existing dynamic analysis techniques are far too slow for end users, and currently do not help user systems self-heal. This research investigates techniques to overcome these limitations by developing efficient dynamic analysis techniques, as well as techniques for diagnosing the root cause of an exploited vulnerability, repairing any damage done, and defending the system against further attacks.