Download now Free registration required
In order to protect the authors' computer systems from attacks, it is useful to be able to replay an attack once it has been detected, so that they may see how the attack works in greater detail. To this end, they have implemented a deterministic replay feature for Argos, a virtual machine system which is capable of detecting network attacks. Replay is based on capturing all events of the execution of a so-called capture run. Those events can later be used to re-create exactly the same execution in a replay run. This paper describes their experiences designing and implementing this system.
- Format: PDF
- Size: 663.1 KB