Preventing race condition attacks on file-systems

Proceedings of the ACM Symposium on Applied Computing

Volumn 1, Issue , 2005, Pages 346-353

  Uppuluri, Prem ^a   Joshi, Uday ^a   Ray, Arnab ^b  

^a UNIVERSITY OF MISSOURI KANSAS CITY   (United States)

^b USA   (United States)

Author keywords

Race conditions; Security; System calls

Indexed keywords

FILE-SYSTEMS; RACE CONDITION ATTACKS; SECURITY; SYSTEM CALLS;

CONDITION MONITORING; HAZARDS AND RACE CONDITIONS; PROCESS CONTROL; PUBLIC POLICY;

SECURITY OF DATA;

EID: 33644499445     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1066677.1066758     Document Type: Conference Paper

References (24)

1. Rahul Agarwal and Scott D. Stoller. Type inference for parameterized race-free java. In 5th ICVMC, volume 2937 of LNCS, 2004.
2. Rajeev Alur, Robert K. Brayton, Thomas A. Henzinger, Shaz Qadeer, and Sriram K. Rajamani. Partial-order reduction in symbolic state-space exploration. Formal Methods in System Design, 18:97-116, 2001.
3. Arthur Bernstein. Analysis of programs for parallel processing. In IEEE Trans. Electronic Comput. EC-15 5, 757-763, 1966.
4. Matt Bishop and Michael Dilger. Checking for race conditions in file accesses. Computing Systems, 9(2):131-152, Spring 1996.
5. Chandrasekhar Boyapati and Martin Rinard. A parameterized type system for race-free Java programs. In 16th OOPSLA, October 2001.
6. CERT, http://www.cert.org/advisories/index.html.
7. Crispin Cowan, Steve Beattie, Chris Wrigh, and Greg Kroah-Hartman. Raceguard. In 10th USENIX Security Symposium, 2001.
8. Stefan Savage et al. Eraser: A dynamic data race detector for multithreaded programs. ACM TCS, 15(4):391-411, 1997.
9. Tal Garfinkel. Traps and pitfalls: Practical problems in in system call interposition based security tools. In NDSS, 2003.
10. K. Ilgun. A real-time intrusion detection system for unix. In IEEE S&P, 1993.
11. K. Jain and R Sekar. User-level infrastructure for system call int erposition: A platform for intrusion detection and confinement. In ISOC NDSS, 2000.
12. C. Ko. Execution Monitoring of Security-Critical Programs in a Distributed System. PhD thesis, UCDavis, Dec 1996.
13. Calvin Ko and Timothy Redmond. Noninterference and intrusion detection. In IEEE S&P, 2003.
14. S. Kumar. Classification and Detection of Computer Intrusions. PhD thesis, CERIAS lab, Purdue University, December 1995.
15. R. Lippmann, J.W. Haines, D. Fried, J. Korba, and K. Das. The 1999 darpa off-line intrusion detection evaluation. In Computer Networks, 2000.
16. J. Craig Lowery. A tour of tocttou. In SANS GSEC practical v1.4b, 2002.
17. José F. Martínez and Josep Torrellas. Applying thread-level speculation to explicitly parallel applications. In ASPLOS, San Jose, CA, 2002.
18. Robert H. B. Netzer and Barton P. Miller. What are race conditions?: Some issues and formalizations. ACM Lett. Program. Lang. Syst., 1(1):74-88, 1992.
19. Bruno Blanchet Patrick. A static analyzer for large safety-critical software. In citeseer.nj.nec.com/581205.html.
20. R. Sekar and Prem Uppuluri. Synthesizing fast intrusion prevention/detection systems from high-level specifications. In USENIX Security Symposium, 1999.
21. Eugene Tsyrklevich and Bennet Yee. Dynamic detection and prevention of race conditions in file accesses. In USENIX Security Symposium, 2003.
22. P. Uppuluri and R. Sekar. Experiences with specification-based intrusion detection. In RAID, LNCS, 2001.
23. Prem Uppuluri. Intrusion Detection/Prevention Using Behavior Specfications. PhD thesis, SUNY Stony Brook, August 2003.
24. C. Wright, C. Cowan, J. Morris, S. Smalley, and G. Kroah. Linux security modules. In citeseer.nj.nec.com/wright02linux.html, 2002.