DMCA
XTRec: Secure Real-time Execution Trace Recording on Commodity Platforms
| Citations: | 13 - 5 self |
BibTeX
@MISC{Vasudevan_xtrec:secure,
author = {Amit Vasudevan and Ning Qu and Adrian Perrig},
title = {XTRec: Secure Real-time Execution Trace Recording on Commodity Platforms},
year = {}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
We propose XTRec, a primitive that can record the instruction-level execution trace of a commodity computing system. Our primitive is resilient to compromise to provide integrity of the recorded execution trace. We implement XTRec on the AMD platform running the Windows OS. The only software component that is trusted in the system during runtime is XTRec itself, which contains only 2,195 lines of code permitting manual audits to ensure security and safety. We use XTRec to show whether a particular code has been executed on a system, or conversely to prove that some malware has not executed on the system. This is a highly desirable property to ensure information assurance, especially in critical e-government infrastructure. Our experimental results show that the imposed overhead is 2x– 4x for real-world applications. This overhead is primarily due to CPU Branch Trace Messages(BTM), a ubiquitous debugging feature used to record control-flow instructions. Hardware improvements to BTM would therefore enable XTRec to run with minimal overhead. 1
Keyphrases
commodity platform secure real-time execution trace recording ubiquitous debugging feature amd platform instruction-level execution trace recorded execution trace particular code manual audit software component real-world application information assurance control-flow instruction desirable property window o cpu branch trace message critical e-government infrastructure hardware improvement minimal overhead experimental result
