NDLI: Property-based testing of privileged programs

Content Provider	IEEE Xplore Digital Library
Author	Fink, G. Levitt, K.
Copyright Year	1994
Description	Author affiliation: Dept. of Comput. Sci., California Univ., Davis, CA, USA (Fink, G.; Levitt, K.)
Abstract	Addresses the problem of testing security-relevant software, especially privileged (typically, setuid root) and daemon programs in UNIX. The problem is important, since it is these programs that are the source of most UNIX security flaws. For some programs, such as the UNIX sendmail program, new security flaws are still being discovered, despite being in use for many years. For special-purpose systems with fewer users, flaws are likely to remain undiscovered for even longer. Our testing process is driven by specifications we create for the privileged programs. These specifications simultaneously define the allowed behavior far these programs and identify problematic system calls, regions where the program is vulnerable, and generic security flaws. The specifications serve three roles in our testing methodology: as criteria against which a program is sliced, as oracles against which it is tested, and as a basis for generating useful tests. Slicing is employed to significantly reduce the size of the program to be tested. We show that a slice of a privileged program (rdist) with respect to its security specifications is quite small. We introduce the Tester's Assistant, a collection of tools to mechanize the process of testing security-related C programs.<>
Starting Page	154
Ending Page	163
File Size	965862
Page Count	10
File Format	PDF
ISBN	0818667958
DOI	10.1109/CSAC.1994.367311
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	1994-12-05
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Security System testing Plasma welding Computer science Contracts Laboratories Protection Performance analysis Algorithm design and analysis Performance gain
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Property-Based Testing of Privileged Programs (1994)

Anomaly detection with high deviations for system security

Considering the relative importance of network performance and network features

Abstract combinatorial programs and efficient property testers

An embedded firewall based on network processor

The SAVANT project

Testing Path Generation Algorithm with Network Performance Constraints for Nondeterministic Parallel Programs

Benchmark programs for evaluating knowledge-based performance requirements

On Evaluating Obfuscatory Strength of Alias-based Transforms using Static Analysis

Property-based testing of privileged programs

Similar Documents

Property-Based Testing of Privileged Programs (1994)

Anomaly detection with high deviations for system security

Considering the relative importance of network performance and network features

Abstract combinatorial programs and efficient property testers

An embedded firewall based on network processor

The SAVANT project

Testing Path Generation Algorithm with Network Performance Constraints for Nondeterministic Parallel Programs

Benchmark programs for evaluating knowledge-based performance requirements

On Evaluating Obfuscatory Strength of Alias-based Transforms using Static Analysis

Property-based testing of privileged programs