MINESTRONE: Identifying and containing
software vulnerabilities

MINESTRONE logo
 
Back to MINESTRONE
 
AFRL

REASSURE: A Self-contained Mechanism for Healing Software Using Rescue Points

Software failures in server applications are a significant problem for preserving system availability. ASSURE introduced rescue points to recover software from unknown faults, while maintaining both system integrity and availability, by mimicking system behavior under known error conditions.

Rescue points are locations in existing application code for handling a given set of programmer-anticipated failures, which are automatically repurposed and tested for safely enabling fault recovery from a larger class of (unanticipated) faults.

Rescue Point
Example of rescue point

REASSURE builds on Intel's Pin DBI framework to provide a self-containted mechanism to head software using rescue points. Rescue points can be identified and tested as before, and finally deployed using Pin and REASSURE. This new approach does not require special kernel support, and can be applied on already deployed binaries simply be installing Pin, and attaching it to the faulty application.

People

Prof. Angelos Keromytis, Columbia University
Georgios Portokalidis, Columbia University

Related papers


Fatal error: Uncaught ArgumentCountError: gmmktime() expects at least 1 argument, 0 given in /var/www/html/projects/minestrone/functions.inc:5 Stack trace: #0 /var/www/html/projects/minestrone/functions.inc(5): gmmktime() #1 /var/www/html/projects/minestrone/reassure/description.inc(38): print_pubs('SELFHEAL', '../') #2 /var/www/html/projects/minestrone/reassure/index.php(32): include('/var/www/html/p...') #3 {main} thrown in /var/www/html/projects/minestrone/functions.inc on line 5