MASc seminar - Mark Stephen DittmerExport this event to calendar

Tuesday, October 28, 2014 — 11:00 AM EDT

Candidate

Mark Stephen Dittmer

Title

The UNIX Process Identity Crisis: A Standards-Driven Approach to Setuid

Supervisor

Mahesh Tripunitara

Abstract

In this talk, I will present results from a standards-driven analysis of the setuid family of system calls. Setuid is a widely-used system for privilege-management, and some setuid functions are standardized by POSIX. My analysis includes an assessment of the quality of the standard, and a verification of five setuid implementations with respect to the standard. In the talk, I will discuss specific ways in which both the standard and implementations contribute to problems with setuid's usability and correctness. Towards the amelioration of these problems, I will discuss an alternative interface that wraps setuid, and argue for its superior usability and correctness.

Location 
E5 building
Room 4047

,

S M T W T F S
30
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
1
2
3
  1. 2019 (158)
    1. October (1)
    2. August (2)
    3. July (31)
    4. June (24)
    5. May (23)
    6. April (35)
    7. March (25)
    8. February (9)
    9. January (10)
  2. 2018 (150)
    1. December (13)
    2. November (25)
    3. October (12)
    4. September (13)
    5. August (7)
    6. July (23)
    7. June (9)
    8. May (6)
    9. April (9)
    10. March (16)
    11. February (10)
    12. January (7)
  3. 2017 (212)
  4. 2016 (242)
  5. 2015 (242)
  6. 2014 (268)
  7. 2013 (192)
  8. 2012 (31)