Intrusion recovery for database-backed web applications
Name
Zeldovich_Intrusion.pdf
Size
294.16 KB
Format
Adobe PDF
Checksum (MD5)
6cabf8f22ae2e0ed6f18e6f8c31a092f
Author(s)
Chandra, Ramesh
Kim, Taesoo
Shah, Meelap
Narula, Neha
Zeldovich, Nickolai
Date Issued
October 2011
Journal
Proceedings of the Twenty-Third ACM Symposium on Operating Systems Principles (SOSP '11)
Publisher
Association for Computing Machinery (ACM)
Citation
Ramesh Chandra, Taesoo Kim, Meelap Shah, Neha Narula, and Nickolai Zeldovich. 2011. Intrusion recovery for database-backed web applications. In Proceedings of the Twenty-Third ACM Symposium on Operating Systems Principles (SOSP '11). ACM, New York, NY, USA, 101-114.
Version
Author's final manuscript
Abstract
Warp is a system that helps users and administrators of web applications recover from intrusions such as SQL injection, cross-site scripting, and clickjacking attacks, while preserving legitimate user changes. Warp repairs from an intrusion by rolling back parts of the database to a version before the attack, and replaying subsequent legitimate actions. Warp allows administrators to retroactively patch security vulnerabilities---i.e., apply new security patches to past executions---to recover from intrusions without requiring the administrator to track down or even detect attacks. Warp's time-travel database allows fine-grained rollback of database rows, and enables repair to proceed concurrently with normal operation of a web application. Finally, Warp captures and replays user input at the level of a browser's DOM, to recover from attacks that involve a user's browser. For a web server running MediaWiki, Warp requires no application source code changes to recover from a range of common web application vulnerabilities with minimal user input at a cost of 24--27% in throughput and 2--3.2 GB/day in storage.
MIT Department
Massachusetts Institute of Technology. Computer Science and Artificial Intelligence Laboratory
Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science
Terms of Use
Creative Commons Attribution-Noncommercial-Share Alike 3.0
Persistent DSpace Link
DOI of Published Version
https://doi.org/10.1145/2043556.2043567
