{"id":"https://openalex.org/W2108767597","doi":null,"title":"Sting: An End-to-End Self-healing System for Defending against Zero-day Worm Attacks on Commodity Software","display_name":"Sting: An End-to-End Self-healing System for Defending against Zero-day Worm Attacks on Commodity Software","publication_year":2006,"publication_date":"2006-01-01","ids":{"openalex":"https://openalex.org/W2108767597","mag":"2108767597"},"language":"en","primary_location":{"id":"pmh:oai:CiteSeerX.psu:10.1.1.72.894","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.72.894","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://reports-archive.adm.cs.cmu.edu/anon/2005/CMU-CS-05-191.pdf","raw_type":"text"},"volume":null,"type":"article","indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5113488541","display_name":"James Newsome","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"James Newsome","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016565332","display_name":"David Brumley","orcid":"https://orcid.org/0000-0003-2233-3538","observed_orcids":["https://orcid.org/0000-0003-2233-3538"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"David Brumley","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5019426968","display_name":"Dawn Xiaodong Song","orcid":"https://orcid.org/0000-0001-9745-6802","observed_orcids":["https://orcid.org/0000-0001-9745-6802"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dawn Song","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0001-9745-6802","affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.1417,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.82529926,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9789999723434448,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9789999723434448,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.014299999922513962,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10772","display_name":"Distributed systems and fault tolerance","score":0.0017999999690800905,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/self-healing-systems","display_name":"self-healing systems","score":0.8759999871253967},{"id":"https://openalex.org/keywords/self-monitoring","display_name":"self-monitoring","score":0.5429999828338623},{"id":"https://openalex.org/keywords/self-diagnosis","display_name":"self-diagnosis","score":0.875},{"id":"https://openalex.org/keywords/self-hardening","display_name":"self-hardening","score":0.8949999809265137},{"id":"https://openalex.org/keywords/self-recovery","display_name":"self-recovery","score":0.9610000252723694},{"id":"https://openalex.org/keywords/proactive-protection","display_name":"proactive protection","score":0.46399998664855957},{"id":"https://openalex.org/keywords/high-availability","display_name":"high availability","score":0.4950000047683716},{"id":"https://openalex.org/keywords/critical-services","display_name":"critical services","score":0.39100000262260437}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5579887628555298},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.48509180545806885},{"id":"https://openalex.org/C2779439359","wikidata":"https://www.wikidata.org/wiki/Q317088","display_name":"Commodity","level":2,"score":0.42762291431427},{"id":"https://openalex.org/C54750564","wikidata":"https://www.wikidata.org/wiki/Q26643","display_name":"Commerce","level":1,"score":0.3437420129776001},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.3291299343109131},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.10256758332252502}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:CiteSeerX.psu:10.1.1.72.894","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.72.894","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://reports-archive.adm.cs.cmu.edu/anon/2005/CMU-CS-05-191.pdf","raw_type":"text"},{"id":"mag:2108767597","doi":null,"is_oa":false,"landing_page_url":"http://reports-archive.adm.cs.cmu.edu/anon/2005/CMU-CS-05-191.pdf","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"sustainable_development_goals_aurora":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":48,"referenced_works":["https://openalex.org/W11234669","https://openalex.org/W29275369","https://openalex.org/W46382711","https://openalex.org/W88694106","https://openalex.org/W162038026","https://openalex.org/W206265171","https://openalex.org/W1489157620","https://openalex.org/W1498585374","https://openalex.org/W1502476232","https://openalex.org/W1510508184","https://openalex.org/W1514171102","https://openalex.org/W1525451871","https://openalex.org/W1545927878","https://openalex.org/W1593678010","https://openalex.org/W1597305440","https://openalex.org/W1650675509","https://openalex.org/W1786189552","https://openalex.org/W2031006315","https://openalex.org/W2033811087","https://openalex.org/W2093406244","https://openalex.org/W2097174997","https://openalex.org/W2098010707","https://openalex.org/W2100198871","https://openalex.org/W2100583963","https://openalex.org/W2100666033","https://openalex.org/W2102970979","https://openalex.org/W2108860402","https://openalex.org/W2109739361","https://openalex.org/W2110137598","https://openalex.org/W2111817346","https://openalex.org/W2123365370","https://openalex.org/W2131726714","https://openalex.org/W2134633067","https://openalex.org/W2137786570","https://openalex.org/W2140073981","https://openalex.org/W2140991542","https://openalex.org/W2142892618","https://openalex.org/W2144553078","https://openalex.org/W2148647281","https://openalex.org/W2151996777","https://openalex.org/W2155750598","https://openalex.org/W2158049821","https://openalex.org/W2158909123","https://openalex.org/W2161728228","https://openalex.org/W2163762767","https://openalex.org/W2165100126","https://openalex.org/W2165952552","https://openalex.org/W2171957559"],"related_works":["https://openalex.org/W1829301546","https://openalex.org/W7100509018","https://openalex.org/W7100200563","https://openalex.org/W7098092563","https://openalex.org/W2158909123","https://openalex.org/W4236406743","https://openalex.org/W3081630791","https://openalex.org/W7096558025","https://openalex.org/W7096788818","https://openalex.org/W1598116468"],"abstract_inverted_index":{"Complex":[0],"computer":[1,20],"systems":[2],"are":[3,202],"plagued":[4],"with":[5],"bugs":[6],"and":[7,14,22,59,70,96,123,131,146,161,164,181,221,224,238,256],"vulnerabilities.":[8],"Worms":[9],"such":[10,269],"as":[11,270],"SQL":[12],"Slammer":[13],"hit-list":[15,84,271],"worms":[16],"exploit":[17],"vulnerabilities":[18,58,215],"in":[19,78,175],"programs":[21,113,149,255],"can":[23,62,209],"compromise":[24],"millions":[25],"of":[26,57,67,81,129,143,178,192,234],"vulnerable":[27,36,254],"hosts":[28],"within":[29],"minutes":[30],"or":[31],"even":[32,77,263],"seconds,":[33],"bringing":[34],"down":[35],"critical":[37,68,258],"services.":[38],"In":[39],"this":[40,104],"paper,":[41],"we":[42,61,134,242],"propose":[43],"an":[44,108],"end-to-end":[45,109],"self-healing":[46,110],"approach":[47,188,233],"to":[48,73,93,117,138,151,167,194,252,260],"achieve":[49,103],"the":[50,79,120,140,158,205,218,245],"following":[51],"goal:":[52],"for":[53,244],"a":[54,64,82,126,168,190,231],"large":[55,65,127],"class":[56,128],"attacks,":[60],"protect":[63,253],"fraction":[66],"services":[69,259],"enable":[71,257],"them":[72],"be":[74,152],"highly":[75],"available":[76],"case":[80],"zero-day":[83],"worm.":[85],"Moreover,":[86,186],"our":[87,187],"techniques":[88,116,137],"do":[89],"not":[90,173],"require":[91],"access":[92],"source":[94],"code":[95],"thus":[97],"work":[98],"on":[99,157],"COTS":[100],"software.":[101],"We":[102],"goal":[105],"by":[106,204],"designing":[107],"approach:":[111],"(1)":[112],"use":[114,135],"light-weight":[115],"efficiently":[118,165,195,225],"self-monitor":[119],"execution":[121],"behavior":[122],"reliably":[124],"detect":[125],"errors":[130,145],"exploits,":[132,147],"(2)":[133],"sophisticated":[136],"self-diagnose":[139],"root":[141],"cause":[142],"detected":[144],"(3)":[148],"self-harden":[150,222],"resilient":[153],"against":[154],"further":[155],"attacks":[156,268],"same":[159],"vulnerability,":[160],"(4)":[162],"safely":[163],"self-recover":[166],"safe":[169],"state.":[170],"Self-hardening":[171],"does":[172],"result":[174],"false":[176],"positives":[177],"legitimate":[179],"traffic,":[180],"adds":[182],"little":[183],"performance":[184],"overhead.":[185],"allows":[189],"community":[191],"nodes":[193],"share":[196],"Self-Verifiable":[197],"Antibody":[198],"Alerts":[199],"(SVAAs),":[200],"which":[201],"produced":[203],"self-diagnosis":[206],"engine.":[207],"Nodes":[208],"verify":[210],"that":[211,248],"SVAAs":[212],"fix":[213],"real":[214],"without":[216],"trusting":[217],"SVAA":[219],"senders,":[220],"quickly":[223],"based":[226],"upon":[227],"SVAAs.":[228],"By":[229],"employing":[230],"new":[232],"combining":[235],"proactive":[236],"protection":[237],"reactive":[239],"anti-body":[240],"defense,":[241],"show":[243],"first":[246],"time":[247],"it":[249],"is":[250],"possible":[251],"remain":[261],"undisrupted":[262],"under":[264],"extremely":[265],"fast":[266],"worm":[267],"worms.":[272],"1":[273]},"counts_by_year":[{"year":2020,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":2}],"updated_date":"2026-10-16T09:59:22.235173","created_date":"2016-06-24T00:00:00"}