Skip to main content
USENIX
  • Conferences
  • Students
Sign in
  • HotPar '12 Home
  • Registration and Lodging
  • Organizers
  • Workshop Program
  • Poster Session
  • Birds-of-a-Feather Sessions
  • Travel
  • Calendar
  • Students
  • Questions?
  • For Participants
  • Call for Papers
  • Past Proceedings

sponsors

Gold Sponsor
Bronze Sponsor
Bronze Sponsor
Bronze Sponsor

twitter

Tweets by @usenix

usenix conference policies

  • Event Code of Conduct
  • Conference Network Policy
  • Statement on Environmental Responsibility Policy

You are here

Home » Concurrency Attacks
Tweet

connect with us

http://twitter.com/usenix
http://www.facebook.com/usenixassociation

Concurrency Attacks

Authors: 

Junfeng Yang, Ang Cui, Sal Stolfo, and Simha Sethumadhavan, Columbia University

Abstract: 

Just as errors in sequential programs can lead to security exploits, errors in concurrent programs can lead to concurrency attacks. Questions such as whether these attacks are feasible and what characteristics they have remain largely unknown. In this paper, we present a preliminary study of concurrency attacks and the security implications of real world concurrency errors. Our study yields several interesting findings. For instance, we observe that the exploitability of a concurrency error depends on the duration of the timing window within which the error may occur. We further observe that attackers can increase this window through carefully crafted inputs. We also find that four out of five commonly used sequential defenses become unsafe when applied to concurrent programs. Based on our findings, we propose new defense directions and fixes to existing defenses.

Junfeng Yang, Columbia University

Ang Cui, Columbia University

Sal Stolfo, Columbia University

Simha Sethumadhavan, Columbia University

Open Access Media

USENIX is committed to Open Access to the research presented at our events. Papers and proceedings are freely available to everyone once the event begins. Any video, audio, and/or slides that are posted after the event are also free and open to everyone. Support USENIX and our commitment to Open Access.

Yang PDF
View the slides

Presentation Audio

MP3 Download OGG Download

Download Audio

  • Log in or    Register to post comments

Gold Sponsors

Bronze Sponsors

© USENIX

  • Privacy Policy
  • Contact Us