TU Darmstadt / ULB / TUbiblio

Hot-Hardening: Getting More Out of Your Security Settings

Biedermann, Sebastian ; Katzenbeisser, Stefan ; Szefer, Jakub (2014)
Hot-Hardening: Getting More Out of Your Security Settings.
New Orleans, Louisiana, USA
doi: 10.1145/2664243.2664246
Conference or Workshop Item, Bibliographie

Abstract

Applying optimized security settings to applications is a difficult and laborious task. Especially in cloud computing, where virtual servers with various pre-installed software packages are leased, selecting optimized security settings is very difficult. In particular, optimized security settings are not identical in every setup. They depend on characteristics of the setup, on the ways an application is used or on other applications running on the same system. Configuring optimized settings given these interdependencies is a complex and time-consuming task. In this work, we present an autonomous agent which improves security settings of applications which run in virtual servers. The agent retrieves custom-made security settings for a target application by investigating its specific setup, it tests and transparently changes settings via introspection techniques unbeknownst from the perspective of the virtual server. During setting selection, the application's operation is not disturbed nor any user interaction is needed. Since optimal settings can change over time or they can change depending on different tasks the application handles, the agent can continuously adapt settings as well as improve them periodically. We call this approach hot-hardening and present results of an implementation that can hot-harden popular networking applications such as Apache2 and OpenSSH.

Item Type: Conference or Workshop Item
Erschienen: 2014
Creators: Biedermann, Sebastian ; Katzenbeisser, Stefan ; Szefer, Jakub
Type of entry: Bibliographie
Title: Hot-Hardening: Getting More Out of Your Security Settings
Language: German
Date: December 2014
Publisher: ACM
Book Title: Proceedings of the 30th Annual Computer Security Applications Conference
Series: ACSAC '14
Event Location: New Orleans, Louisiana, USA
DOI: 10.1145/2664243.2664246
Abstract:

Applying optimized security settings to applications is a difficult and laborious task. Especially in cloud computing, where virtual servers with various pre-installed software packages are leased, selecting optimized security settings is very difficult. In particular, optimized security settings are not identical in every setup. They depend on characteristics of the setup, on the ways an application is used or on other applications running on the same system. Configuring optimized settings given these interdependencies is a complex and time-consuming task. In this work, we present an autonomous agent which improves security settings of applications which run in virtual servers. The agent retrieves custom-made security settings for a target application by investigating its specific setup, it tests and transparently changes settings via introspection techniques unbeknownst from the perspective of the virtual server. During setting selection, the application's operation is not disturbed nor any user interaction is needed. Since optimal settings can change over time or they can change depending on different tasks the application handles, the agent can continuously adapt settings as well as improve them periodically. We call this approach hot-hardening and present results of an implementation that can hot-harden popular networking applications such as Apache2 and OpenSSH.

Identification Number: TUD-CS-2014-1103
Divisions: Profile Areas > Cybersecurity (CYSEC)
Profile Areas
Date Deposited: 21 Aug 2017 14:45
Last Modified: 15 May 2018 10:33
PPN:
Export:
Suche nach Titel in: TUfind oder in Google
Send an inquiry Send an inquiry

Options (only for editors)
Show editorial Details Show editorial Details