Can I read Preventing Race Condition Attacks on File-systems on EtoBox?

Preventing Race Condition Attacks on File-systems by Prem Uppuluri; Uday Joshi; Arnab Ray is a scholarly article available to read on EtoBox.

What is Preventing Race Condition Attacks on File-systems about?

Race condition attacks occur when a process performs a sequence of operations on a file, under the assu.m,ption that the operations are being executed "ato~mically". This can be exploited by a malicious process which changes the characteristics of that file between two successive operations on i t by a victi,m process, thus, inducing the victi,m process to operate on a ,modified or diflerent file. I n this paper we present a practical approach t o detect and prevent such race condition attacks. We ,monitor file operations and enforce policies which prevent the exploitation of the temporal window between any consecutive file operations by a process. Our approach does not rely on knowledge of previously known attacks. I n addition, our experiments on Linux de,monstrated that attacks can be detected with false alarms of less than 3% with performance overheads less than 8% of the processes execution tisme.

Author

Prem Uppuluri; Uday Joshi; Arnab Ray

Publisher

ACM

Published

2005

Language

EN