System and method for preventing race condition vulnerability
US8127413B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Jul 11, 2006 |
| Grant date | Mar 6, 2012 |
| Priority date | — |
| Expiry date | Jan 14, 2030 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F2221/2105
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
A method for identifying vulnerable system call pairs is disclosed. The method is based on a model for identifying Time-Of-Check-To-Time-Of-Use (TOCTTOU) problem (called STEM), which enumerates the potential file system call pairs (called exploitable TOCTTOU pairs) that form the check/use steps. The system function calls are classified into a plurality of predefined classes and pairs of the function calls are formed according to predefined criteria, where the function calls within a pair are associated with the same file invariant.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.