Mokhov, Serguei A. and Laverdière, Marc-André and Benredjem, Djamel (2008) Taxonomy of Linux Kernel Vulnerability Solutions. In: International Joint Conferences on Computer, Information, and Systems Sciences, and Engineering (CISSE 2007) , December 2007.
![[img]](http://spectrum.library.concordia.ca/style/images/fileicons/application_pdf.png)
| PDF - Accepted Version 179Kb |
Official URL: http://dx.doi.org/10.1007/978-1-4020-8739-4_86
Abstract
This paper presents the results of a case study on software vulnerability solutions in the Linux kernel. Our major contribution is the introduction of a classification of methods used to solve vulnerabilities. Our research shows that error handling, redesign, and precondition validation are the most used methods in solving vulnerabilities in the Linux kernel. This contribution is accompanied with statistics on the occurrence of the different types of vulnerabilities and their solutions that we observed during our case study, combined with example source code patches. We also combine our findings with existing programming guidelines to create the first security-oriented coding guidelines for the Linux kernel.
| Divisions: | Concordia University > Faculty of Engineering and Computer Science > Computer Science and Software Engineering Concordia University > Faculty of Engineering and Computer Science > Concordia Institute for Information Systems Engineering Concordia University > Research Units > Computer Security Laboratory |
|---|---|
| Item Type: | Conference or Workshop Item (Paper) |
| Refereed: | Yes |
| Authors: | Mokhov, Serguei A. and Laverdière, Marc-André and Benredjem, Djamel |
| Date: | 2008 |
| Keywords: | Linux kernel, Software Vulnerabilities, Vulnerability Remedial, Vulnerability Solutions Taxonomy |
| ID Code: | 7809 |
| Deposited By: | Serguei Mokhov |
| Deposited On: | 30 Sep 2011 11:15 |
| Last Modified: | 30 Sep 2011 11:15 |
Repository Staff Only: item control page
