大通彩票

English Version

热点链接

新闻在线
  图书馆
网上办公
教务系统
校长信箱

学术活动

首页学术活动

Checking Security Checks in OS Kernels

主 讲 人 :Dr. Kangjie Lu    

活动时间:06月10日10时00分    

地      点 :理科群1号楼D418

讲座内容:

Operating system (OS)kernels play a critical role in computer systems, which not only managehardware and system resources, but also provide services and protection.To safely perform these complicated and error-prone tasks, OS kernels enforce alarge number of security checks which validate system states.  Unfortunately,security checks themselves areoften buggy.  In particular, a security checkmay be missing or incomplete, be placed in an improper location, target a wrongvariable, etc. These bugs can be exploited for severe attacks such as ompletesystem control and inion leakage. In this talk, I will first talk about how to automatically identifysecurity checks and then present how to detect the three common classes ofsecurity-check bugs, namely, insufficient checks, incorrect checks, andineffective checks. I will also present a set of new techniques that havehelped us to find hundreds of new critical security-check bugs in OS kernelsand share our interesting experience on working with Linux maintainers to patchthese bugs.  Several techniques such asfinding indirect-call targets, identifying critical variables, and finding semantically-similarcode paths are generic and thus can also benefit future research on bugdetection and system hardening.


主讲人介绍:

Dr. Kangjie Lu is anassistant professor in the Computer Science & Engineering Department of theUniversity of Minnesota-Twin Cities. His research interests include securityand privacy, program analyses, and operating systems. He is particularlyinterested in automatically finding classes of vulnerabilities in widely used systemsand hardening them while preserving their reliability and

efficiency. Hisresearch results are mainly published at top-tier venues and have led to manyimportant updates in the Linux kernel, the Android OS, the FreeBSD kernel, andApple’s iOS. He received his Ph.D. in Computer Science from the GeorgiaInstitute of Technology.


发布时间:2019-06-06 16:44:50

9号彩票puranaya.com版权所有河北师范大学    冀ICP备18011017号-3  

冀公网安备 13010802000630号


地址:河北省石家庄市南二环东路20号 邮编:050024 制作维护:河北师范大学计算机网络中心
友情链接:万利彩票官网  9号彩票  9号彩票-Welcome!  万利彩票  快赢彩票  万利彩票官网  万利彩票官网  

免责声明: 本站资料及图片来源互联网文章,本网不承担任何由内容信息所引起的争议和法律责任。所有作品版权归原创作者所有,与本站立场无关,如用户分享不慎侵犯了您的权益,请联系我们告知,我们将做删除处理!