Model Checking an Entire Linux Distribution for Security Violations (2005)

by Benjamin Schwarz , Hao Chen , David Wagner , Geoff Morrison , Jacob West , Jeremy Lin
Venue:In Proceedings of the 21st Annual Computer Security Applications Conference (ACSAC
Citations:21 - 3 self

Documents Related by Co-Citation

178 MOPS: an Infrastructure for Examining Security Properties of Software – Hao Chen, David Wagner - 2002
20 Noninterference and intrusion detection – C Ko, T Redmond - 2002
119 Checking for Race Conditions in File Accesses – Matt Bishop, Michael Dilger - 1996
14 Fixing Races for Fun and Profit: How to use access(2) – Drew Dean, Alan J. Hu - 2004
16 Dynamic detection and prevention of race conditions in file accesses – Eugene Tsyrklevich, Bennet Yee - 2003
315 Checking system rules using system-specific, programmer-written compiler extensions – Dawson Engler, Benjamin Chelf, Andy Chou - 2000
47 Experience with Transactions in QuickSilver – Prank Schmuck, Jim Wyllie - 1991
30 Secure Applications Need Flexible Operating Systems – David Mazieres, M. Frans Kaashoek - 1997
10 TOCTTOU vulnerabilities in UNIX-style file systems: an anatomical study – J Wei, C Pu - 2005
16 RaceGuard: Kernel Protection from Temporary File Race Vulnerabilities – Crispin Cowan, Steve Beattie, Chris Wright, Greg Kroah-hartman - 2001
11 Fixing races for fun and profit: how to abuse atime – Nikita Borisov, Rob Johnson, Naveen Sastry, David Wagner - 2005
7 A methodical defense against TOCTTOU attacks: the EDGI approach – C Pu, J Wei - 2006
63 Model checking one million lines of C code – Hao Chen, Drew Dean, David Wagner - 2004
245 Bugs as Deviant Behavior: A General Approach to Inferring Errors in Systems Code – Dawson Engler, David Yu Chen, Seth Hallem, Andy Chou, Benjamin Chelf - 2001
42 Setuid demystified – H Chen, D Wagner, D Dean
101 Using Model Checking to Find Serious File System Errors – Junfeng Yang, Paul Twohey, Dawson Engler - 2004
44 Improving Computer Security using Extended Static Checking – Brian V. Chess - 2002
139 Using Programmer-Written Compiler Extensions to Catch Security Holes – Ken Ashcraft, et al.
91 Detecting Past and Present Intrusions through Vulnerability-Specific Predicates – Ashlesha Joshi, Samuel T. King, George W. Dunlap, Peter M. Chen - 2005