返回
System Auditing for Real-Time Systems
DOI:10.1145/3625229.png)
摘要
En 中文
System auditing is an essential tool for detecting malicious events and conducting forensic analysis. Although used extensively on general-purpose systems, auditing frameworks have not been designed with consideration for the unique constraints and properties of Real-Time Systems (RTS). System auditing could provide tremendous benefits for security-critical RTS. However, a naive deployment of auditing on RTS could violate the temporal requirements of the system while also rendering auditing incomplete and ineffectual. To ensure effective auditing that meets the computational needs of recording complete audit information while adhering to the temporal requirements of the RTS, it is essential to carefully integrate auditing into the real-time (RT) schedule. This work adapts the Linux Audit framework for use in RT Linux by leveraging the common properties of such systems, such as special purpose and predictability. Ellipsis, an efficient system for auditing RTS, is devised that learns the expected benign behaviors of the system and generates succinct descriptions of the expected activity. Evaluations using varied RT applications show that Ellipsis reduces the volume of audit records generated during benign activity by up to 97.55% while recording detailed logs for suspicious activities. Empirical analyses establish that the auditing infrastructure adheres to the properties of predictability and isolation that are important to RTS. Furthermore, the schedulability of RT tasksets under audit is comprehensively analyzed to enable the safe integration of auditing in RT task schedules.
Keyword:
Security auditing
model-based reduction
cyber-physical systems
期刊
A
IF:
2.8
论文数:
293
被引数:
770
机构
引用论文
Analysis of activity rhythm and behavior pattern for plateau pika in degraded alpine meadow高原鼠兔在退化高寒草地中的活动节律和行为模式分析
Investigation into the Impact of Pika Population Dynamics on Grassland Degradation and the Development of Management Strategies: A Case Study Conducted in Sanjiangyuan National Park对 pikas 种群动态对草地退化及管理策略发展影响的研究:在 Sanjiangyuan National Park 进行的案例研究
Investigating the effects of tree species diversity and relative density on bird species richness with acoustic indices研究树种多样性和相对密度对鸟类物种丰富度的影响,采用声学指数

