Aphid: Anomaly Processor in Hardware for Intrusion Detection - Softcover

Hart, Samuel

Softcover

ISBN 10: 1288286317 ISBN 13: 9781288286317

Publisher: BiblioBazaar, LLC, 2012

Synopsis

The Anomaly Processor in Hardware for Intrusion Detection (APHID) is a step forward in the field of co-processing intrusion detection mechanism. By using small, fast hardware primitives APHID relieves the production CPU from the burden of se- curity processing. These primitives are tightly coupled to the CPU giving them access to critical state information such as the current instruction(s) in execution, the next instruction, registers, and processor state information. By monitoring these hardware elements, APHID is able to determine when an anomalous action occurs within one clock cycle. Upon detection, APHID can force the processor into a corrective state, or a halted state, depending on the required response. APHID primitives also harden the production system against attacks such as Distribute Denial of Service attack and buffer overflow attacks. APHID is designed to be fast and agile, with the ability to create multiple monitors that switch in and out of monitoring with the context switches of the production processor to highly focused coverage over multiple devices and sections of code.

Edition details

• Publisher: BiblioBazaar, LLC
• Publication date: 2012
• Language: English
• ISBN 10: 1288286317
• ISBN 13: 9781288286317
• Binding: Paperback
• Number of pages: 124