Linux kernel vulnerabilities: State-of-the-art defenses and open problems

Proceedings of the 2nd Asia-Pacific Workshop on Systems, APSys'11

Volumn , Issue , 2011, Pages

  Chen, Haogang ^a   Mao, Yandong ^a   Wang, Xi ^a   Zhou, Dong ^b   Zeldovich, Nickolai ^a   Kaashoek, M Frans ^a  

^a MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

^b TSINGHUA UNIVERSITY   (China)

Author keywords

[No Author keywords available]

Indexed keywords

LINUX KERNEL; OPEN PROBLEMS; PROTECTION TECHNIQUES; TRUSTED COMPUTING BASE;

SEMANTICS;

SECURITY OF DATA;

EID: 84863145383     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2103799.2103805     Document Type: Conference Paper

References (28)

1. Smatch. http://smatch.sourceforge.net/.
2. Sparse. http://sparse.wiki.kernel.org/.
3. J. Arnold, T. Abbott, W. Daher, G. Price, N. Elhage, G. Thomas, and A. Kaseorg. Security impact ratings considered harmful. In Proceedings of the 12th Workshop on Hot Topics in Operating Systems, Monte Verita, Switzerland, May 2009.
4. K. Ashcraft and D. Engler. Using programmer-written compiler extensions to catch security holes. In Proceedings of the 23rd IEEE Symposium on Security and Privacy, Berkeley, CA, May 2002.
5. S. Boyd-Wickizer and N. Zeldovich. Tolerating malicious device drivers in Linux. In Proceedings of the 2010 USENIX Annual Technical Conference, Boston, MA, June 2010.
6. M. Castro, M. Costa, J.-P. Martin, M. Peinado, P. Akritidis, A. Donnelly, P. Barham, and R. Black. Fast byte-granularity software fault isolation. In Proceedings of the 22nd ACM Symposium on Operating Systems Principles, Big Sky, MT, October 2009.
7. X. Chen, T. Garfinkel, E. C. Lewis, P. Subrahmanyam, C. A. Waldspurger, D. Boneh, J. Dwoskin, and D. R. K. Ports. Over-shadow: A virtualization-based approach to retrofitting protection in commodity operating systems. In Proceedings of the 13th International Conference on Architectural Support for Programming Languages and Operating Systems, Seattle, WA, March 2008.
8. S. Christey and R. A. Martin. Vulnerability type distributions in CVE. http://cve.mitre.org/docs/vuln-trends/vuln-trends.pdf, 2007.
9. B. Cook, A. Podelski, and A. Rybalchenko. Termination proofs for systems code. In Proceedings of the 2006 ACM Conference on Programming Language Design and Implementation, Ottawa, Canada, June 2006.
10. M. Dalton, H. Kannan, and C. Kozyrakis. Real-world buffer overflow protection for userspace and kernelspace. In Proceedings of the 19th Usenix Security Symposium, San Jose, CA, July 2008.
11. I. Dillig, T. Dillig, and A. Aiken. Static error detection using semantic inconsistency inference. In Proceedings of the 2007 ACM Conference on Programming Language Design and Implementation, San Diego, CA, June 2007.
12. N. Elhage. CVE-2010-4258: Turning denial-of-service into privilege escalation. http://blog.nelhage.com/2010/12/cve-2010-4258-from-dos-to-privesc/, 2010.
13. D. Engler, B. Chelf, A. Chou, and S. Hallem. Checking system rules using system-specific, programmer-written compiler extensions. In Proceedings of the 4th Symposium on Operating Systems Design and Implementation, San Diego, CA, October 2000.
14. D. Engler, D. Y. Chen, S. Hallem, A. Chou, and B. Chelf. Bugs as deviant behavior: A general approach to inferring errors in systems code. In Proceedings of the 18th ACM Symposium on Operating Systems Principles, Banff, Canada, October 2001.
15. Ú. Erlingsson, M. Abadi, M. Vrable, M. Budiu, and G. C. Necula. XFI: Software guards for system address spaces. In Proceedings of the 7th Symposium on Operating Systems Design and Implementation, Seattle, WA, November 2006.
16. J. N. Herder, H. Bos, B. Gras, P. Homburg, and A. S. Tanenbaum. MINIX 3: A highly reliable, self-repairing operating system. ACM SIGOPS Operating Systems Review, 40(3):80-89, 2006. (Pubitemid 44299051)
17. C. Jim, P. Ben, G. Tal, and R. Mendel. Shredding your garbage: reducing data lifetime through secure deallocation. In Proceedings of the 14th Usenix Security Symposium, Baltimore, MD, August 2005.
18. A. Lenharth, V. S. Adve, and S. T. King. Recovery domains: an organizing principle for recoverable operating systems. In Proceedings of the 14th International Conference on Architectural Support for Programming Languages and Operating Systems, Washington, DC, March 2009.
19. S. A. Mokhov, M.-A. Laverdiere, and D. Benredjem. Taxonomy of Linux kernel vulnerability solutions. Innovative Techniques in Instruction Technology, E-learning, E-assessment, and Education, 2008.
20. V. Nossum. Getting started with kmemcheck. http://www.mjmwired.net/ kernel/Documentation/kmemcheck.txt.
21. N. Palix, G. Thomas, S. Saha, C. Calvès, J. Lawall, and G. Muller. Faults in Linux: Ten years later. In Proceedings of the 16th International Conference on Architectural Support for Programming Languages and Operating Systems, Newport Beach, CA, March 2011.
22. A. Seshadri, M. Luk, N. Qu, and A. Perrig. SecVisor: A tiny hypervisor to provide lifetime kernel code integrity for commodity OSes. In Proceedings of the 21st ACM Symposium on Operating Systems Principles, Stevenson, WA, October 2007.
23. H. Shacham. The geometry of innocent flesh on the bone: Return-into-libc without function calls (on the x86). In Proceedings of the 14th ACM Conference on Computer and Communications Security, Alexandria, VA, October-November 2007.
24. M. M. Swift, M. Annamalai, B. N. Bershad, and H. M. Levy. Recovering device drivers. In Proceedings of the 6th Symposium on Operating Systems Design and Implementation, San Francisco, CA, December 2004.
25. R. Ta-Min, L. Litty, and D. Lie. Splitting interfaces: Making trust between applications and operating systems configurable. In Proceedings of the 7th Symposium on Operating Systems Design and Implementation, Seattle, WA, November 2006.
26. Y. Xie and A. Aiken. Scalable error detection using Boolean satisfiability. In Proceedings of the 32rd ACM Symposium on Principles of Programming Languages, Long Beach, CA, January 2005.
27. N. Zeldovich, S. Boyd-Wickizer, E. Kohler, and D. Mazières. Making information flow explicit in HiStar. In Proceedings of the 7th Symposium on Operating Systems Design and Implementation, Seattle, WA, November 2006.
28. N. Zeldovich, H. Kannan, M. Dalton, and C. Kozyrakis. Hardware enforcement of application security policies. In Proceedings of the 8th Symposium on Operating Systems Design and Implementation, San Diego, CA, December 2008.