Shield: Vulnerability-Driven Network Filters for Preventing Known Vulnerability Exploits (2004)
Cached
Download Links
- [research.microsoft.com]
- [www.research.microsoft.com]
- [www.sigcomm.org]
- [www.acm.org]
- [acm.org]
- [research.microsoft.com]
- [research.microsoft.com]
- DBLP
Other Repositories/Bibliography
| Venue: | In ACM SIGCOMM |
| Citations: | 146 - 9 self |
BibTeX
@INPROCEEDINGS{Wang04shield:vulnerability-driven,
author = {Helen J. Wang and Helen J. Wang and Chuanxiong Guo and Chuanxiong Guo and Daniel R. Simon and Daniel R. Simon and Alf Zugenmaier and Alf Zugenmaier},
title = {Shield: Vulnerability-Driven Network Filters for Preventing Known Vulnerability Exploits},
booktitle = {In ACM SIGCOMM},
year = {2004},
pages = {193--204}
}
Years of Citing Articles
Bookmark
 |
 |
 |
 |
 |
 |
OpenURL
Abstract
Software patching has not been an effective first-line defense preventing large-scale worm attacks, even when patches had long been available for their corresponding vulnerabilities. Generally, people have been reluctant to patch their systems immediately, because patches are perceived to be unreliable and disruptive to apply. To address this problem, we propose a first-line worm defense in the network stack, using shields -- vulnerability-specific, exploit-generic network filters installed in end systems once a vulnerability is discovered and before the patch is applied. These filters examine the incoming or outgoing traffic of vulnerable applications, and drop traffic that exploits vulnerabilities. Shields are less disruptive to install and uninstall, easier to test for bad side effects, and hence more reliable than traditional software patches. In this paper, we show...
