Home

Concurrency Attacks

Junfeng Yang; Ang Cui; Salvatore Stolfo; Lakshminarasimhan Sethumadhavan

Title:
Concurrency Attacks
Author(s):
Yang, Junfeng
Cui, Ang
Stolfo, Salvatore
Sethumadhavan, Lakshminarasimhan
Date:
Type:
Articles
Department:
Computer Science
Permanent URL:
Book/Journal Title:
4th USENIX Workshop on Hot Topics in Parallelism (HotPar '12), Berkeley, CA, June 7-8, 2012
Publisher:
USENIX
Publisher Location:
Berkeley, CA
Abstract:
Just as errors in sequential programs can lead to security exploits, errors in concurrent programs can lead to concurrency attacks. Questions such as whether these attacks are real and what characteristics they have remain largely unknown. In this paper, we present a preliminary study of concurrency attacks and the security implications of real concurrency errors. Our study yields several interesting findings. For instance, we observe that the exploitability of a concurrency error depends on the duration of the timing window within which the error may occur. We further observe that attackers can increase this window through carefully crafted inputs. We also find that four out of five commonly used sequential defense mechanisms become unsafe when applied to concurrent programs. Based on our findings, we propose new defense directions and fixes to existing defenses.
Subject(s):
Computer science
Item views:
95
Metadata:
View

In Partnership with the Center for Digital Research and Scholarship at Columbia University Libraries/Information Services.