Model checking an entire linux distribution for security violations

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn 2005, Issue , 2005, Pages 13-22

  Schwarz, Benjamin ^a   Chen, Hao ^a   Wagner, David ^a   Morrison, Geoff ^a   West, Jacob ^a   Lin, Jeremy ^a   Tu, Wei ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

LINUX DISTRIBUTION; MODEL CHECKING; SECURITY VIOLATIONS; STATE-OF-THE-ART MODEL;

CODES (STANDARDS); MATHEMATICAL MODELS; SECURITY OF DATA; SOFTWARE ENGINEERING;

COMPUTER CRIME;

EID: 33846287594     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSAC.2005.39     Document Type: Conference Paper

References (13)

1. mopscode.sourceforge.net.
2. K. Ashcraft and D. Engler. Using programmer-written compiler extensions to catch security holes. In Proceedings of IEEE Security and Privacy 2002, 2002.
3. T. Ball and S. K. Rajamani. The SLAM project: Debugging system software via static analysis. In POPL '02: Proceedings of the ACM SIGPLAN-SIGACT Conference on Principles of Programming Languages, 2002.
4. M. Bishop and M. Dilger. Checking for race conditions in file accesses. Computing Systems, 9(2): 131-152, Spring 1996.
5. S. Chaki, E. Clarke, A. Groce, S. Jha, and H. Veith. Modular verification of software components in C. In International Conference on Software Engineering, pages 385-395, May 2003.
6. H. Chen, D. Dean, and D. Wagner. Model checking one million lines of C code. In Proceedings of the 11th Annual Network and Distributed System Security Symposium, San Diego, CA, Feb. 4-6, 2004.
7. H. Chen and D. Wagner. MOPS: an infrastructure for examining security properties of software. In Proceedings of the 9th ACM Conference on Computer and Communications Security (CCS), pages 235-244, Washington, DC, Nov. 18-22, 2002.
8. C. Cowan, S. Beattie, C. Wright, and G. Kroah-Hartman. RaceGuard: Kernel protection from temporary file race vulnerabilities. In Proceedings of the Tenth USENIX Security Symposium, 2001.
9. D. Engler, B. Chelf, A. Chou, and S. Hallem. Checking system rules using system-specific, programmer-written compiler extensions. In OSDI, 2000.
10. D. Engler and M. Musuvathi. Model-checking large network protocol implementations. In Proceedings of the First Symposium on Networked Systems Design and Implementation, 2004.
11. T. A. Henzinger, R. Jhala, R. Majumdar, and G. Sutre. Software verification with BLAST. In Proceedings of the 10th SPIN Workshop on Model Checking Software, 2003.
12. T. Kremenek and D. Engler. Z-Ranking: Using Statistical Analysis to Counter the Impact of Static Analysis Approximations. In Proceedings of the 2003 Static Analysis Symposium, 2003.
13. M. Musuvathi, D. Park, A. Chou, D. R. Engler, and D. L. Dill. CMC: A Pragmatic Approach to Model Checking Real Code. In Proceedings of the Fifth Symposium on Operating Systems Design and Implementation, Dec. 2002.