Dynamic detection and prevention of race conditions in file accesses

Proceedings of the 12th USENIX Security Symposium

Volumn , Issue , 2003, Pages 243-255

  Tsyrklevich, Eugene ^a   Yee, Bennet ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

FILE ORGANIZATION;

DYNAMIC DETECTION; FILE ACCESS; FILESYSTEM; NAMESPACES; SECURITY ISSUES; TIME WINDOWS;

HAZARDS AND RACE CONDITIONS;

EID: 33644529836     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (18)

1. R. P. Abbott, J. S. Chin, J. E. Donnelley, W. L. Konigsford, S. Tokubo, and D. A. Webb. Security Analysis and Enhancements of Computer Operating Systems. NBSIR 76-1041, Institute for Computer Sciences and Technology, National Bureau of Standards, April 1976.
2. R. Anguiano. A Static Analysis Technique for the Detection of TOCTTOU Vulnerabilities. Master Thesis, University of California Davis, 2001.
3. R. Bisbey and D. Hollingsworth. Protection Analysis Project Final Report. ISI/RR-78-13, DTIC AD A056816, USC/Information Sciences Institute, May 1978.
4. M. Bishop. Race Conditions, Files, and Security Flaws: or, The Tortoise and the Hare Redux. Technical Report 95-8, Department of Computer Science, University of California at Davis, September 1995.
5. M. Bishop and M. Dilger. Checking for Race Conditions in File Accesses. Computing systems, pages 131-152, Spring 1996.
6. C. Cowan, S. Beattie, C. Wright, and G. Kroah-Hartman. RaceGuard: Kernel Protection From Temporary File Race Vulnerabilities. In Proceedings of the 10th USENIX Security Symposium, August 2001.
7. C. Cowan. Personal communication.
8. T. Garfinkel. Traps and pitfalls: Practical problems in system call interposition based security tools. In Proceedings of the Network and Distributed Systems Security Symposium, February 2003.
9. G. Guninski. OpenBSD 2.9,2.8 local root compromise. Bugtraq mailing list, June 2001.
10. The OpenBSD Project. http://www.openbsd.org/
11. Openwall Project. Linux kernel patch. http://www.openwall.com/linux/
12. N. Provos. Improving Host Security with System Call Policies. CITI Technical Report 02-3, November 2002.
13. W. Purczynski. rm - recursive directory removal race condition. Bug-fileutils mailing list, March 2002.
14. F. Schmuck and J. Wyllie. Experience with transactions in QuickSilver. In Proceedings of the 13th ACM Symposium on Operating System Principles, pages 239-53, October 1991.
15. Secure Software. Rough Auditing Tool for Security (RATS). http://www.securesoftware.com/rats.php
16. E. Tsyrklevich. Dynamic Detection and Prevention of Race Conditions in File Accesses. Master Thesis, University of California San Diego, 2002.
17. J. Viega, J. Bloch, T. Kohno, and G. McGraw. ITS4: a static vulnerability scanner for C and C++ code. In proceedings of 16th Annual Computer Security Applications Conference, December 2000.
18. D. Wheeler. Flawfinder. http://www.dwheeler.com/flawfinder