New Computer Program Prevents Crashes And Hacker Attacks

CYBER WARS

Almost everything done on a computer uses some amount of memory-each graphic on an open Web page. For example-and when a program is running, it is constantly requesting small or medium chunks of memory space to hold each item.

by Staff Writers
Amherst MA (SPX) Dec 28, 2006
Today's computers have more than 2,000 times as much memory as the machines of yesteryear, yet programmers are still writing code as if memory is in short supply. Not only does this make programs crash annoyingly, but it also can make users vulnerable to hacker attacks, says computer scientist Emery Berger from the University of Massachusetts Amherst.

With such problems in mind, Berger created a new program that prevents crashing and makes users safer, he says. Dubbed DieHard, there are versions for programs that run in Windows or Linux. DieHard is available free for non-commercial users at here.

Berger developed DieHard together with Microsoft researcher Ben Zorn. Berger has received a $30,000 grant from Microsoft, a $30,000 grant from Intel, and a $300,000 grant from the National Science Foundation for his work on DieHard.

Almost everything done on a computer uses some amount of memory-each graphic on an open Web page. For example-and when a program is running, it is constantly requesting small or medium chunks of memory space to hold each item, explains Berger. He likens the memory landscape to a row of houses, each with only enough square footage for a certain number of bytes.

The problem, says Berger, is that sometimes when memory real estate is requested, programs can unwittingly rent out houses that are already occupied. They also might request a certain amount of square footage when they actually need more, so an item can spill over into another "house." These mistakes can make programs suddenly crash, or worse.

"Ironically, crashing is the best thing that can happen," says Berger. "An overflow also can make your computer exploitable by hackers."

One way that the computer becomes more vulnerable results from the fact that "addresses" that are designated for a password, for example, will be on the same lot on the same street in every version of the program. So if a hacker overwrites a password, he or she can easily locate the password address on any of the umpteen versions of the program that are out there.

DieHard presents several remedies to such problems. First, it takes a compact row of memory buildings and spreads them around in the landscape. It also randomly assigns addresses-a password that has a downtown address in one session may be in the suburbs next time around. And in some versions of the program, DieHard will secretly launch two additional versions of the program the user is running-if a program starts to crash, that buggy version gets shut down and one of the other two is selected to remain open. DieHard can also tell a user the likelihood that they'll have been affected by a particular bug.

These problems wouldn't arise if programmers were a little less focused on speed and efficiency, which is rarely a problem these days, and more attentive to security issues, says Berger.

"Today we have way more memory and more computer power than we need," he says. "We want to use that to make systems more reliable and safer, without compromising speed."

CYBER WARS

Scientists develop high-tech mine detector

Cambridge, Mass. (UPI) Dec 20, 2006
U.S. scientists are developing a highly pinpointed sound beam that can detect buried land mines from a distance.

SUPERPOWERS Building A Bigger US Army Russia Against US Missile Defense Plans For Europe Analysis: Three crises pileup? Policy Watch: U.S.' adversaries and Iraq	NUKEWARS Eight Nations Now Building ICBM Nuclear Missiles US Sought Two-Month Nuclear Deadline For North Korea Russia Seeking To Extend Use Of Cold War Missile Stocks US Naval Buildup In Gulf Shows Enduring Presence
MISSILE NEWS LockMart-Built Trident II D5 Launched In Two-Missile US Navy Test LockMart Announces Firing Of Hellfire II Missile During French Evaluation Raytheon Awarded Contract For Missile Launcher Production Pakistan Test Fires Nuclear-Capable Missile	MISSILE DEFENSE New Radar At Lekhtusi: A Shield Against Missile Attacks South Korea Eyes Independent Missile Defense System BMD Watch: Bob Gates backs BMD BMD Focus: Collision course with Russia
AEROSPACE IATA Gives Cautious Welcome To EU Emissions Trading Plan EU Proposes CO2 Emission Quotas For Airlines Shoulder Ligament A Linchpin In The Evolution Of Flight EU Compromises On Airlines In Carbon-Trading Scheme	UAV NEWS Warfare Center To Host Autonomous Unmanned Vehicle Fest 2007 Northrop Grumman Lifts US Navy To New Era For Unmanned Flight Boeing Australia To Provide Australia Its First Tactical UAV Boeing, U.S. Air Force Demonstrate UAV Automated Aerial Refueling Capability
IRAQ WARS Facing A Shiite Baghdad Outside View: Short-changing Iraq Outside View: Syria must be involved Analysis: Bush's last attempt in Iraq	MILTECH New Antenna Begins Testing Crews Test Latest Stryker Vehicle ATK Pioneering Air Bursting Ammunition Technology Selected by US Navy Star-P Uses Supercomputers In Support Of Futuristic Military Vehicles

The content herein, unless otherwise known to be public domain, are Copyright 1995-2006 - SpaceDaily.AFP and UPI Wire Stories are copyright Agence France-Presse and United Press International. ESA PortalReports are copyright European Space Agency. All NASA sourced material is public domain. Additionalcopyrights may apply in whole or part to other bona fide parties. Advertising does not imply endorsement,agreement or approval of any opinions, statements or information provided by SpaceDaily on any Web page published or hosted by SpaceDaily. Privacy Statement