检索结果-南通市图书馆

AMCheX: Accurate Analysis of Missing-Check Bugs for Linux Kernel

Journal of Computer Science & Technology 2021年第6期36卷 1325-1341页

作者： Ying-Jie Wang Liang-Ze Yin Wei Dong Key Laboratory of Software Engineering for Complex Systems College of Computer Science National University of Defense TechnologyChangsha 410073China

The Linux kernel adopts a large number of security checks to prevent security-sensitive operations from being executed under unsafe *** a security-sensitive operation is unchecked,a missing-check issue *** check is a class of severe bugs in software programs especially in operating system kernels,which may cause a variety of security issues,such as out-of-bound accesses,permission bypasses,and privilege *** to the lack of security specifications,how to automatically identify security-sensitive operations and their required security checks in the Linux kernel becomes a challenge for missing-check *** this paper,we present an accurate missing-check analysis method for Linux kernel,which can automatically infer possible security-sensitive ***,we first automatically identify all possible security check functions of *** according to their callsites,a two-direction analysis method is leveraged to identify possible security-sensitive operations.A missing-check bug is reported when the security-sensitive operation is not protected by its corresponding security *** have implemented our method as a tool,named AMCheX,on top of the LLVM(Low Level Virtual Machine)framework and evaluated it on the Linux *** reported 12 new missing-check bugs which can cause security *** of them have been confirmed by Linux maintainers.

关键词： security check function security-sensitive operation program analysis missing-check

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

欢迎您,

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

请选择保存的检索档案：

请选择收藏分类：

通借通还

欢迎您,

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：