00000cmm a22000004i 4500 UP-99796217612749441 Buklod 20230215105418.0 m |o d | ta 141227s2015 xx o u | eng d 9783319135151 (online ISBN) (iLib)UPD-00362013457 WaSeSS DENGII rda eng DMLUC QA 76.9 A25 S74 2015eb Stewin, Patrick author. Detecting peripheral-based attacks on the host memory Patrick Stewin. Cham Springer International Publishing [2015] 1 online resource. text rdacontent computer rdamedia online resource rdacarrier Introduction -- Technical Background, Preliminaries and Assumptions -- Related Work -- Study of a Stealthy, Direct Memory Access based Malicious Software -- A Primitive for Detecting DMA Malware -- Authentic Reporting to External Platforms -- Conclusions and Future Work. IP-based subscription, on campus and remote access. Access via Electronic Resources of the UPD Engineering Library and University Library websites. This work addresses stealthy peripheral-based attacks on host computers and presents a new approach to detecting them. Peripherals can be regarded as separate systems that have a dedicated processor and dedicated runtime memory to handle their tasks. The book addresses the problem that peripherals generally communicate with the host via the host?s main memory, storing cryptographic keys, passwords, opened files and other sensitive data in the process ? an aspect attackers are quick to exploit. Here, stealthy malicious software based on isolated micro-controllers is implemented to conduct an attack analysis, the results of which provide the basis for developing a novel runtime detector. The detector reveals stealthy peripheral-based attacks on the host?s main memory by exploiting certain hardware properties, while a permanent and resource-efficient measurement strategy ensures that the detector is also capable of detecting transient attacks, which can otherwise succeed when the applied strategy only measures intermittently. Attackers exploit this strategy by attacking the system in between two measurements and erasing all traces of the attack before the system is measured again. Electronic reproduction. New York SpringerLink 2015. Available via World Wide Web through SpringerLink. Rootkits (Computer software) Host-based intrusion detection systems (Computer security) Computer peripherals Security measures. Electronic books. SpringerLink (Online service). Electronic Resource https://dx.doi.org/10.1007/978-3-319-13515-1 Available for University of the Philippines System via SpringerLink. Click here to access https://link-springer-com.ezproxy.engglib.upd.edu.ph/book/10.1007%2F978-3-319-13515-1 Also available remotely for University of the Philippines System via SpringerLink. Click here to access thru EZproxy (viewed 08 February 2019) FO UPD DENG-II Electronic Resource