576 search results - page 1 / 116 » Implementing a secure setuid program |
PDCN
2004
13 years 6 months ago
2004
Setuid programs are often exploited by malicious attackers to obtain unauthorized access to local systems. Setuid programs, especially owned by the root user, are granted root pri...
SP
1997
IEEE
13 years 9 months ago
1997
IEEE
This paper describes a specification-based approach to detect exploitations of vulnerabdities in securitycritical programs. The approach utilizes security specifications that desc...
ACSAC
2005
IEEE
13 years 10 months ago
2005
IEEE
Logging and auditing is an important system facility for monitoring correct system operation and for detecting potential security problems. We present an architecture for implemen...
PLDI
2011
ACM
12 years 7 months ago
2011
ACM
SIGOPS
2008
13 years 5 months ago
2008
In Linux, applications like su and login currently run as root in order to access authentication information and set or alter the identity of the process. In such cases, if the ap...