Map
Index
Random
Help
th

Quote: setuid is poorly designed and widely misused; causes security vulnerabilities

topics > all references > references c-d > QuoteRef: chenH8_2002 , p. abstract



Topic:
security by access rights
Topic:
authentication

Quotation Skeleton

Access control in Unix systems is mainly based … , such as setuid, are poorly designed, insufficiently … First, we study kernel sources and compare the … develop a formal model of user IDs as … use the resulting FSA to uncover pitfalls in … calls … , to detect inconsistency in the handling of … programs automatically. Finally, we provide general guidelines on … more comprehensible, usable, and portable than the usual …   Google-1   Google-2

Copyright clearance needed for quotation.

Additional Titles

Quote: develop finite state model of user ids; uncover pitfalls in setuid, define proper usage, and propose a high-level API

Related Topics up

Topic: security by access rights (36 items)
Topic: authentication (87 items)

Copyright © 2002-2008 by C. Bradford Barber. All rights reserved.
Thesa is a trademark of C. Bradford Barber.