English Version

热点链接

新闻在线
  图书馆
网上办公
教务系统
校长信箱

Checking Security Checks in OS Kernels

主 讲 人 :Dr. Kangjie Lu    

活动时间:06月10日10时00分    

地      点 :理科群1号楼D418

讲座内容:

Operating system (OS)kernels play a critical role in computer systems, which not only managehardware and system resources, but also provide services and protection.To safely perform these complicated and error-prone tasks, OS kernels enforce alarge number of security checks which validate system states.  Unfortunately,security checks themselves areoften buggy.  In particular, a security checkmay be missing or incomplete, be placed in an improper location, target a wrongvariable, etc. These bugs can be exploited for severe attacks such as ompletesystem control and information leakage. In this talk, I will first talk about how to automatically identifysecurity checks and then present how to detect the three common classes ofsecurity-check bugs, namely, insufficient checks, incorrect checks, andineffective checks. I will also present a set of new techniques that havehelped us to find hundreds of new critical security-check bugs in OS kernelsand share our interesting experience on working with Linux maintainers to patchthese bugs.  Several techniques such asfinding indirect-call targets, identifying critical variables, and finding semantically-similarcode paths are generic and thus can also benefit future research on bugdetection and system hardening.


主讲人介绍:

Dr. Kangjie Lu is anassistant professor in the Computer Science & Engineering Department of theUniversity of Minnesota-Twin Cities. His research interests include securityand privacy, program analyses, and operating systems. He is particularlyinterested in automatically finding classes of vulnerabilities in widely used systemsand hardening them while preserving their reliability and

efficiency. Hisresearch results are mainly published at top-tier venues and have led to manyimportant updates in the Linux kernel, the Android OS, the FreeBSD kernel, andApple’s iOS. He received his Ph.D. in Computer Science from the GeorgiaInstitute of Technology.


发布时间:2019-06-06 16:44:50

这个公司能够最终成为圈内的佼佼者,www.2959.com是澳门国际娱乐平台官方网站唯一授权会员登录手机版,www.316net,www.366net,516.net,626.net,766.net,www.565.net,www.16.net,bwin62.com,bwin180.com,新萄京手机版超多款老虎机类型,为中外游戏用户提供尖端、前沿的游戏精品,我们都能够非常好的进行一些游戏的体验。  



XML 地图 | Sitemap 地图