Intrusion Recovery Using Selective Re-execution

RETRO repairs a desktop or server after an adversary compromises it, by undoing the adversary's changes while preserving legitimate user actions, with minimal user involvement. During normal operation, RETRO records an action history graph, which is a detailed dependency graph describing the sy...

Full description

Bibliographic Details
Main Authors: Kim, Taesoo, Wang, Xi, Zeldovich, Nickolai, Kaashoek, M. Frans
Other Authors: Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science
Format: Article
Language:en_US
Published: USENIX Association 2011
Online Access:http://hdl.handle.net/1721.1/61699
https://orcid.org/0000-0003-0238-2703
https://orcid.org/0000-0001-7098-586X