Welcome to the Second Life Forums Archive

These forums are CLOSED. Please visit the new forums HERE

Byte-Code Fingerprint Scripts to Fight Attacks?

Kristian Ming
Head Like A Hole
Join date: 5 Feb 2005
Posts: 404
10-07-2006 10:46
I'm not sure how feasible this is, particularly short term, but a suggestion:

Every compiled script generates bytecode when compiled, right? And an exact copy of this script should generate an identical bytecode, I assume. Why not produce a fingerprint of these bytecodes at compile time as well, as an attack countermeasure.

When an attack is detected, send a signal to all simulators on the grid to blacklist scripts with the Fingerprint of the offending script. This will stop the attack. Then the normal procedures for handling attack objects can happen at the Asset Server level as load allows.

-Kris
_____________________
"When you're going through hell, keep going!" -- Winston Churchill
Jeska Linden
Administrator
Join date: 26 Jul 2004
Posts: 2,388
10-09-2006 17:03
Thanks for the suggestion Kristian, I'll pass this onto our developers.
_____________________
"The opportunity to participate in the creation of a new world is really a rare one, and so I hope you cherish it."
- Mitch Kapor on Second Life at the 2006 SLCC