arrow
返回

System Auditing for Real-Time Systems

delete2023-11-13
delete0
PRE
AI
A
Ayoosh Bansal *
A
Anant Kandikuppa
M
Monowar Hasan
C
Chien-Ying Chen
A
Adam Bates
S
Sibin Mohan
DOI:10.1145/3625229delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
System auditing is an essential tool for detecting malicious events and conducting forensic analysis. Although used extensively on general-purpose systems, auditing frameworks have not been designed with consideration for the unique constraints and properties of Real-Time Systems (RTS). System auditing could provide tremendous benefits for security-critical RTS. However, a naive deployment of auditing on RTS could violate the temporal requirements of the system while also rendering auditing incomplete and ineffectual. To ensure effective auditing that meets the computational needs of recording complete audit information while adhering to the temporal requirements of the RTS, it is essential to carefully integrate auditing into the real-time (RT) schedule. This work adapts the Linux Audit framework for use in RT Linux by leveraging the common properties of such systems, such as special purpose and predictability. Ellipsis, an efficient system for auditing RTS, is devised that learns the expected benign behaviors of the system and generates succinct descriptions of the expected activity. Evaluations using varied RT applications show that Ellipsis reduces the volume of audit records generated during benign activity by up to 97.55% while recording detailed logs for suspicious activities. Empirical analyses establish that the auditing infrastructure adheres to the properties of predictability and isolation that are important to RTS. Furthermore, the schedulability of RT tasksets under audit is comprehensively analyzed to enable the safe integration of auditing in RT task schedules.
Keyword:
Security auditing
model-based reduction
cyber-physical systems

期刊

A
ACM Transactions on Privacy and Security
IF:
2.8
论文数:
293
被引数:
770

机构

U
University of Illinois Urbana-Champaign
学者数:
2.4W
论文数: 2.0W
被引数: 35
G
George Washington University
学者数:
1.6W
论文数: 1.4W
被引数: 1.7W
University of Illinois System 封面图
University of Illinois System
学者数:
6.9W
论文数: 6.2W
被引数: 644
W
washington state university
学者数:
1.8W
论文数: 1.6W
被引数: 114
学者 查看更多机构
引用论文

引用论文

Impaired recruitment of the hippocampus during conscious recollection in schizophrenia
err1998-08-01
err0
PREAI
errStephan Heckers; Scott Rauch; Donald Goff; Cary Savage; Daniel Schacter; Alan Fischman; Nathaniel Alpert
err分享
err收藏
1D silicon nitride grating refractive index sensor suitable for integration with CMOS detectors
err2017-01-01
err0
errOAAI
errAbdul Shakoor; Marco Grande; James Grant; David R. S. Cumming
err分享
err收藏
General, Efficient, and Real-Time Data Compaction Strategy for APT Forensic Analysis
err2021-01-01
err16
PREAI
errZhu, Tiantian; Wang, Jiayu; Ruan, Linqi; Xiong, Chunlin; Yu, Jinkai; Li, Yaosheng; Chen, Yan; Lv, Mingqi; Chen, Tieming
err分享
err收藏
Modular Synthesis of a New Class of Bis(amino-oxazoline) Using Palladium-Catalyzed Buchwald−Hartwig Amination Methodology
err2006-08-05
err0
PREAI
errSimon Doherty; Julian G. Knight; Catherine H. Smyth; Nicholas T. Sore; Rakesh K. Rath; William McFarlane; Ross W. Harrington; William Clegg
err分享
err收藏
学者 查看更多内容