Intrusion Recovery Using Selective Re-execution
RETRO repairs a desktop or server after an adversary compromises it, by undoing the adversary's changes while preserving legitimate user actions, with minimal user involvement. During normal operation, RETRO records an action history graph, which is a detailed dependency graph describing the sy...
Main Authors: | , , , |
---|---|
Other Authors: | |
Format: | Article |
Language: | en_US |
Published: |
USENIX Association
2011
|
Online Access: | http://hdl.handle.net/1721.1/61699 https://orcid.org/0000-0003-0238-2703 https://orcid.org/0000-0001-7098-586X |