conference paper · International Conference on Advanced Computer Theory and Engineering · 2021

EBF: Event-Based Filter for Exploit Containment

Cited by 1Abstract and details only

Abstract

The remote exploit is a common way used by attackers to get control of hosts, and it is considered one of the major threats of cybersecurity. Nowadays, the increasing number of vulnerabilities and advanced exploit techniques makes it harder to deploy effective countermeasures. The current countermeasures suffer from one or more of these disadvantages: 1) ineffective, 2) high overhead, and 3) unpractical for deployment. Therefore, a new method, which overcomes these disadvantages, for exploit containment is in critical demand. In this paper, we propose Event-Based Filter (EBF), a light-weighted and novel way to contain the exploit. EBF promptly filters out the exploit and terminates it. We present PsEBF, as a prototypic implementation of EBF, to prove our concept. PsEBF can filter process events and contain the exploit rapidly. Experiment on exploit test and performance shows that PsEBF is effective, efficient, and practical for deployment

Cite this paper

APA 7

Chen, X., Chen, J., & Liu, B. (2021). EBF: Event-Based Filter for Exploit Containment. International Conference on Advanced Computer Theory and Engineering, 21, 32–37. https://doi.org/10.1109/icacte53799.2021.00013

MLA 9

Chen, Xinyi, et al. “EBF: Event-Based Filter for Exploit Containment.” International Conference on Advanced Computer Theory and Engineering, vol. 21, 2021, pp. 32–37, https://doi.org/10.1109/icacte53799.2021.00013.

Chicago

Chen, Xinyi, Jingwei Chen, and Bo Liu. 2021. “EBF: Event-Based Filter for Exploit Containment.” International Conference on Advanced Computer Theory and Engineering 21: 32–37. https://doi.org/10.1109/icacte53799.2021.00013.

Harvard

Chen, X., Chen, J. and Liu, B. (2021) ‘EBF: Event-Based Filter for Exploit Containment’, International Conference on Advanced Computer Theory and Engineering, 21, pp. 32–37. Available at: https://doi.org/10.1109/icacte53799.2021.00013.

BibTeX

@article{chen2021event,
  title = {{EBF: Event-Based Filter for Exploit Containment}},
  author = {Chen, Xinyi and Chen, Jingwei and Liu, Bo},
  journal = {International Conference on Advanced Computer Theory and Engineering},
  volume = {21},
  pages = {32--37},
  year = {2021},
  doi = {10.1109/icacte53799.2021.00013}
}

Made from the index record. Check names, capitalisation and page numbers against the paper. Need another style? AI for Research has over 10,000.