GRAMMATECH INC — Department of Defense SBIR Phase I: Modern computer systems involve complex arrangements of many software components. It has p

Description

Modern computer systems involve complex arrangements of many software components. It has proven difficult to secure such systems from attack by finding and closing all security holes. Dynamic monitoring techniques that detect intrusions have been developed to defend against latent, unknown vulnerabilities. However, to date these monitoring techniques have focused too narrowly on specific detection strategies and can often be sidestepped. We propose a next-generation system monitoring platform capable of supporting a wide variety of monitoring strategies. Moreover, our approach provides comprehensive protection for the entire computer system rather than guarding individual processes one-at-a-time. The proposed system monitoring tool incorporates stealth to inhibit an adversary"s ability to disable it, and dynamic optimization to ensure minimal performance overhead on the protected system.