Fixing Races for Fun and Profit: How to use access(2) (2004)

by Drew Dean , Alan J. Hu
Venue:IN 13TH USENIX SECURITY SYMPOSIUM
Citations:14 - 0 self

Documents Related by Co-Citation

119 Checking for Race Conditions in File Accesses – Matt Bishop, Michael Dilger - 1996
11 Fixing races for fun and profit: how to abuse atime – Nikita Borisov, Rob Johnson, Naveen Sastry, David Wagner - 2005
16 Dynamic detection and prevention of race conditions in file accesses – Eugene Tsyrklevich, Bennet Yee - 2003
30 Secure Applications Need Flexible Operating Systems – David Mazieres, M. Frans Kaashoek - 1997
47 Experience with Transactions in QuickSilver – Prank Schmuck, Jim Wyllie - 1991
21 Model Checking an Entire Linux Distribution for Security Violations – Benjamin Schwarz, Hao Chen, David Wagner, Geoff Morrison, Jacob West, Jeremy Lin - 2005
16 RaceGuard: Kernel Protection from Temporary File Race Vulnerabilities – Crispin Cowan, Steve Beattie, Chris Wright, Greg Kroah-hartman - 2001
10 TOCTTOU vulnerabilities in UNIX-style file systems: an anatomical study – J Wei, C Pu - 2005
12 Extending ACID Semantics to the File System – Charles P. Wright, Richard Spillane, Gopalan Sivathanu, Erez Zadok - 2006
178 MOPS: an Infrastructure for Examining Security Properties of Software – Hao Chen, David Wagner - 2002
315 Checking system rules using system-specific, programmer-written compiler extensions – Dawson Engler, Benjamin Chelf, Andy Chou - 2000
20 Noninterference and intrusion detection – C Ko, T Redmond - 2002
7 A methodical defense against TOCTTOU attacks: the EDGI approach – C Pu, J Wei - 2006
9 Detection of file-based race conditions – K-S Lhee, S J Chapin - 2005
5 Portably preventing file race attacks with user-mode path resolution – D TSAFRIR, T HERTZ, D WAGNER, D 2008b DA-SILVA
5 Security Flaws; or the Tortoise and the Hare Redux – M Bishop, Race Conditions, Files - 1995
42 Setuid demystified – H Chen, D Wagner, D Dean
195 RacerX: Effective, Static Detection of Race Conditions and Deadlocks – Dawson Engler, Ken Ashcraft - 2003
91 Detecting Past and Present Intrusions through Vulnerability-Specific Predicates – Ashlesha Joshi, Samuel T. King, George W. Dunlap, Peter M. Chen - 2005