loading
Papers Papers/2022 Papers Papers/2022

Research.Publish.Connect.

Affiliation

Select a Subject

Centre for Digital Forensics and Cyber Security, Tallinn University of Technology, Estonia, CERT.LV, IMCS University of Latvia and Latvia
Context (please use complete words only)
Field
Sort by

1 Papers

TED: A Container based Tool to Perform Security Risk Assessment for ELF Binaries

Topics: Intrusion Detection and Response; Vulnerability Analysis and Countermeasures; Data and Software Security; Security and Privacy in Cloud and Pervasive Computing

Authors: Daniele Mucci 1 and Bernhards Blumbergs 2

Affiliations: 1 Centre for Digital Forensics and Cyber Security, Tallinn University of Technology and Estonia , 2 Centre for Digital Forensics and Cyber Security, Tallinn University of Technology, Estonia, CERT.LV, IMCS University of Latvia and Latvia

Digital Object Identifier: 10.5220/0007371603610369

Proceedings of ICISSP 2019, ISBN: 978-989-758-359-9

Collapse Button Quick Abstract
Attacks against binaries, including novel hardware based attacks (e.g., Meltdown), are still very common, with hundreds of vulnerabilities discovered every year. This paper presents TED, an auditing tool which acts from the defense perspective and verifies whether proper defenses are in place for the GNU/Linux system and for each ELF binary in it. Unlike other solutions proposed, TED aims to integrate several tools and techniques by the use of software containers; this choice created the necessity to compare and analyze the most popular container platforms to determine the most suitable for this use case. The containerization approach allows to reduce complexity, gain flexibility and extensibility at the cost of a negligible performance loss, while significantly reducing the dependencies needed. Performance and functionality tests, both in lab and real-world environments, showed the feasibility of a container-based approach and the usefulness of TED in several use cases.
Collapse Button Related Ontology Subjects/Areas/Topics (3)
Internet Technology

Intrusion Detection and Response

Web Information Systems and Technologies

Topic(s):

Filter listed results, by

Author
Locate Author in list below
Add Author(s) to filter:

- Science and Technology Publications, Lda.
RESOURCES

Proceedings

Papers

Authors

Ontology

CONTACTS

Science and Technology Publications, Lda
Avenida de S. Francisco Xavier, Lote 7 Cv. C,
2900-616 Setúbal, Portugal.

Phone: +351 265 520 185 (National fixed network call)
Fax: +351 265 520 186
Email: info@scitepress.org

EXTERNAL LINKS

PRIMORIS

INSTICC

SCITEVENTS

CROSSREF

PROCEEDINGS SUBMITTED FOR INDEXATION BY:

dblp

Ei Compendex

SCOPUS

Semantic Scholar

Google Scholar

Microsoft Academic