Types and Abstract Interpretation for Authorization Hook Advice

• Published in: Proceedings (IEEE Computer Security Foundations Symposium) pp. 139 - 152
• Main Authors: Skalka, Christian, Darais, David, Jaeger, Trent, Capobianco, Frank
• Format: Conference Proceeding
• Language: English
• Published: IEEE 01.06.2020
• Subjects: Authorization; Linux; Servers; Sockets

Authorization hooks are access control checks that prevent unauthorized principals from interacting with some protected resource, and are used extensively in critical software such as operating systems, middleware, and server programs. They are often intended to mediate information flow between subj...