{"id":2020,"date":"2017-06-05T07:05:09","date_gmt":"2017-06-05T07:05:09","guid":{"rendered":"https:\/\/www.inforsec.org\/wp\/?p=2020"},"modified":"2017-06-06T02:49:48","modified_gmt":"2017-06-06T02:49:48","slug":"6%e6%9c%8810%e6%97%a5inforsec%e4%b8%ad%e5%9b%bd%e7%a7%91%e5%ad%a6%e6%8a%80%e6%9c%af%e5%a4%a7%e5%ad%a6%e6%b4%bb%e5%8a%a8%e9%a2%84%e5%91%8a","status":"publish","type":"post","link":"http:\/\/202.112.238.40\/wp\/?p=2020","title":{"rendered":"6\u670810\u65e5InForSec@\u4e2d\u56fd\u79d1\u5b66\u6280\u672f\u5927\u5b66\u6d3b\u52a8\u9884\u544a\u2014\u20142017\u5e74\u7f51\u7edc\u5b89\u5168\u56fd\u9645\u9876\u7ea7\u5b66\u672f\u4f1a\u8bae\u8bba\u6587\u5206\u4eab"},"content":{"rendered":"

6\u670810\u65e5<\/b><\/strong>I<\/b><\/strong>nForSec@<\/b><\/strong>\u4e2d\u56fd\u79d1\u5b66\u6280\u672f\u5927\u5b66\u6d3b\u52a8\u9884\u544a<\/b><\/strong><\/p>\n

\u5730\u70b9\uff1a\u4e2d\u56fd\u79d1\u5b66\u6280\u672f\u5927\u5b66\u897f\u533a\u7535\u4e09\u697c314<\/b><\/strong>\u5ba4<\/b><\/strong><\/p>\n

\u65f6\u95f4\uff1a<\/b><\/strong>6<\/b><\/strong>\u6708<\/b><\/strong>10<\/b><\/strong>\u65e5<\/b><\/strong>\u4e0b\u5348<\/b><\/strong>14<\/b><\/strong>\uff1a<\/b><\/strong>00<\/b><\/strong>~<\/b><\/strong>16:10<\/b><\/strong><\/p>\n\n\n\n\n\n\n\n
\u65f6\u95f4<\/b><\/span><\/td>\n\u6f14\u8bb2\u5609\u5bbe<\/b><\/strong><\/td>\n\u6f14\u8bb2\u9898\u76ee<\/b><\/strong><\/td>\n<\/tr>\n
14:00-14:10<\/td>\n\u4e3b\u6301\u4eba<\/td>\n\u00a0\u00a0\u4e07\u6d9b\u00a0\u00a0\u534e\u4e3a\u52a0\u62ff\u5927\u7814\u7a76\u6240\u7814\u7a76\u5458<\/td>\n<\/tr>\n
14:10-14:50<\/td>\n\u4e13\u5bb6\u62a5\u544a<\/td>\n\u6bb5\u6d77\u65b0\u00a0\u6e05\u534e\u5927\u5b66\u7f51\u7edc\u79d1\u5b66\u4e0e\u7f51\u7edc\u7a7a\u95f4\u5b66\u9662\u6559\u6388<\/td>\n\u5982\u4f55\u4e0d\u7528\u5b57\u5178\u5b66\u4e60Klingon\u8bed\u8a00\uff1a\u5730\u4e0b\u7ecf\u6d4e\u4f7f\u7528\u7684\u9ed1\u8bdd\u68c0\u6d4b\u4e0e\u6d4b\u91cf( Security&Privacy 2017)<\/td>\n<\/tr>\n
14:50-15:30<\/td>\n\u4e13\u5bb6\u62a5\u544a<\/td>\n\u8521\u5fe0\u95fd\u00a0\u897f\u5b89\u4ea4\u901a\u5927\u5b66\u81ea\u52a8\u5316\u7cfb\u6559\u6388\u3001\u535a\u58eb\u751f\u5bfc\u5e08<\/td>\n\u7ed3\u5408\u624b\u578b\u548c\u884c\u4e3a\u4fe1\u606f\u7684\u591a\u6307\u89e6\u63a7\u8ba4\u8bc1( Security&Privacy 2017)<\/td>\n<\/tr>\n
15:30-16:10<\/td>\n\u4e13\u5bb6\u62a5\u544a<\/td>\n\u738b\u9e4f\u98de\u00a0\u56fd\u9632\u79d1\u5b66\u6280\u672f\u5927\u5b66\u8ba1\u7b97\u673a\u5b66\u9662\u7f51\u7edc\u5b89\u5168\u5b9e\u9a8c\u5ba4\u535a\u58eb<\/td>\n\u9488\u5bf9Linux\u4e2ddouble fetch\u6f0f\u6d1e\u7684\u7814\u7a76\uff08USENIX Security 2017)<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n


\n\u6f14\u8bb2<\/b><\/strong>\u5609\u5bbe\u4ecb\u7ecd<\/b><\/strong>\uff1a<\/b><\/strong><\/p>\n

\u6f14\u8bb2\u4eba\uff1a\u6bb5\u6d77\u65b0<\/strong><\/p>\n

\"\"<\/a><\/p>\n

\u5de5\u5b66\u535a\u58eb\uff0c\u73b0\u4efb\u6e05\u534e\u5927\u5b66\u7f51\u7edc\u79d1\u5b66\u4e0e\u7f51\u7edc\u7a7a\u95f4\u7814\u7a76\u9662\u7814\u7a76\u5458\uff0c\u7f51\u7edc\u4e0e\u4fe1\u606f\u5b89\u5168\u5b9e\u9a8c\u5ba4\u4e3b\u4efb\u3002\u957f\u671f\u4ece\u4e8b\u7f51\u7edc\u5b89\u5168\u7814\u7a76\u548c\u6559\u5b66\uff0c\u5728\u56fd\u9645\u7f51\u7edc\u548c\u7cfb\u7edf\u5b89\u5168\u56db\u5927\u9876\u7ea7\u5b66\u672f\u4f1a\u8bae\u4e0a\u53d1\u8868\u591a\u7bc7\u8bba\u6587\uff0c\u5e76\u83b7NDSS 2016\u5e74\u201c\u6770\u51fa\u8bba\u6587\u5956\u201d\u30022016\u5e74\u83b7\u56fd\u5bb6\u7f51\u4fe1\u529e\u7ec4\u7ec7\u7684\u9996\u5c4a\u201c\u7f51\u7edc\u5b89\u5168\u4f18\u79c0\u4eba\u624d\u201d\u5956\u3002 \u4ed6\u8fd1\u5e74\u7684\u4e3b\u8981\u7814\u7a76\u65b9\u5411\u5305\u62ec\u7f51\u7edc\u57fa\u7840\u8bbe\u65bd\u5b89\u5168\u3001\u5730\u4e0b\u4ea7\u4e1a\u76d1\u6d4b\u3002\u6bb5\u6d77\u65b0\u6559\u6388\u662f\u8457\u540d\u7684 \u201c\u84dd\u83b2\u82b1\u6218\u961f\u201d\u8054\u5408\u521b\u59cb\u4eba\uff0c\u4ed6\u7684\u5b66\u751f\u591a\u6b21\u5728\u56fd\u9645\u8457\u540d\u7684\u7f51\u7edc\u5b89\u5168\u7ade\u8d5b\u4e2d\u540d\u5217\u524d\u8305\u3002\u53e6\u5916\uff0c\u6bb5\u6d77\u65b0\u4f5c\u4e3a\u8054\u5408\u53d1\u8d77\u4eba\u7ec4\u7ec7\u4e86\u7f51\u7edc\u5b89\u5168\u7814\u7a76\u56fd\u9645\u5b66\u672f\u8bba\u575bInForSec\uff0c\u5728\u56fd\u5185\u5916\u5b89\u5168\u5b66\u672f\u548c\u5de5\u4e1a\u5708\u5177\u6709\u91cd\u8981\u5f71\u54cd\u3002<\/p>\n

\u62a5\u544a\u9898\u76ee\uff1a\u5982\u4f55\u4e0d\u7528\u5b57\u5178\u5b66\u4e60Klingon\u8bed\u8a00\uff1a\u5730\u4e0b\u7ecf\u6d4e\u4f7f\u7528\u7684\u9ed1\u8bdd\u68c0\u6d4b\u4e0e\u6d4b\u91cf<\/span><\/strong><\/p>\n

\u62a5\u544a\u6458\u8981\uff1a\u4e92\u8054\u7f51\u4e0d\u4ec5\u8054\u7cfb\u7740\u5408\u6cd5\u7684\u5546\u4e1a\uff0c\u4e5f\u8054\u7cfb\u7740\u5730\u4e0b\u7ecf\u6d4e\u7684\u5546\u5bb6\u4e0e\u6d88\u8d39\u8005\u3002\u4e3a\u4e86\u9003\u907f\u6267\u6cd5\u90e8\u95e8\u7684\u8ffd\u8e2a\u548c\u7f51\u7edc\u8fd0\u8425\u8005\u7684\u8fc7\u6ee4\uff0c\u5730\u4e0b\u7ecf\u6d4e\u6f14\u5316\u53d1\u5c55\u51fa\u4e86\u4e00\u5957\u9ed1\u8bdd\u6216\u9ed1\u8272\u5173\u952e\u8bcd\uff08Black Keyword\uff09\uff0c\u5982\u201c\u83e0\u83dc\u7f51\u201d\uff08\u535a\u5f69\u7f51\uff09\u3002\u8bc6\u522b\u8fd9\u4e9b\u9ed1\u8bdd\u5bf9\u4e8e\u8ffd\u8e2a\u5730\u4e0b\u7ecf\u6d4e\u3001\u6253\u51fb\u7f51\u7edc\u72af\u7f6a\u662f\u975e\u5e38\u6709\u610f\u4e49\u7684\u3002\u7136\u800c\uff0c\u4ee5\u5f80\u5bf9\u8fd9\u4e9b\u9ed1\u8bdd\u7684\u8bc6\u522b\u548c\u5f80\u5f80\u9700\u8981\u5927\u91cf\u624b\u5de5\u7684\u5de5\u4f5c\uff0c\u751a\u81f3\u9700\u8981\u6e17\u900f\u5230\u5730\u4e0b\u4ea7\u4e1a\u793e\u533a\u4e2d\u4ee5\u83b7\u53d6\u60c5\u62a5\uff0c\u975e\u5e38\u5371\u9669\u3002<\/p>\n

\u6e05\u534e\u5927\u5b66\u7f51\u7edc\u7814\u7a76\u9662\u7f51\u7edc\u7a7a\u95f4\u5b89\u5168\u5b9e\u9a8c\u5ba4\u8054\u5408\u767e\u5ea6\u5b89\u5168\u7b49\u5408\u4f5c\u8005\u5bf9\u5730\u4e0b\u7ecf\u6d4e\u8fdb\u884c\u4e86\u957f\u671f\u7684\u7814\u7a76\uff0c\u57282017\u5e74IEEE Symposium on Security and Privacy \u4e0a\u53d1\u8868\u6587\u7ae0\u201c\u5982\u4f55\u4e0d\u7528\u5b57\u5178\u5b66\u4e60Klingon\u8bed\u8a00\uff1a\u5730\u4e0b\u7ecf\u6d4e\u4f7f\u7528\u7684\u9ed1\u8bdd\u68c0\u6d4b\u4e0e\u6d4b\u91cf\u201d\uff0c\u9996\u6b21\u7528\u81ea\u52a8\u5316\u7684\u65b9\u6cd5\u5927\u89c4\u6a21\u63d0\u53d6\u5e76\u7406\u89e3\u4e0d\u65ad\u6f14\u5316\u7740\u7684\u9ed1\u8bdd\u3002\u5728\u524d\u671f\u7814\u7a76\u5730\u4e0b\u7ecf\u6d4e\u7684\u57fa\u7840\u4e0a\uff0c\u7814\u7a76\u8005\u6355\u83b7\u4e86\u9ed2\u5e3d\u641c\u7d22\u5f15\u64ce\u4f18\u5316\uff08Blackhat SEO\uff09\u4ea7\u4e1a\u6240\u63a8\u5e7f\u7684\u7f51\u9875\uff0c\u4ece\u4e2d\u63d0\u53d6\u5019\u9009\u8bcd\uff0c\u5229\u7528\u73b0\u6709\u641c\u7d22\u5f15\u64ce\u5bf9\u6076\u610f\u9875\u9762\u7684\u8bc6\u522b\u529f\u80fd\u5224\u65ad\u662f\u5426\u4e3a\u9ed1\u8bdd\u3002\u7136\u540e\uff0c\u5229\u7528\u641c\u7d22\u5f15\u64ce\u6c47\u805a\u7528\u6237\u7684\u641c\u7d22\u884c\u4e3a\u800c\u63d0\u4f9b\u7684\u76f8\u5173\u641c\u7d22\u529f\u80fd\uff0c\u6269\u5c55\u8fd9\u4e9b\u9ed1\u8bdd\u3002\u7814\u7a76\u8005\u5f00\u53d1\u4e86\u9ed1\u8bdd\u68c0\u6d4b\u4e0e\u6269\u5c55\u7cfb\u7edfKDES\uff0c\u5df2\u7ecf\u5e94\u7528\u4e8e\u767e\u5ea6\u516c\u53f8\u3002\u5728\u4e00\u4e2a\u591a\u6708\u7684\u641c\u7d22\u4e2d\u68c0\u6d4b\u51fa\u4e86\u8fd148\u4e07\u7c7b\u4f3c\u7684\u9ed1\u8272\u5173\u952e\u8bcd\uff0c\u4ece\u4e2d\u63d0\u53d6\u51fa\u4e861500\u4e2a\u6838\u5fc3\u8bcd\uff0c\u5982\u201c\u51b0\u59b9\u201d\uff08\u966a\u4f34\u5438\u6bd2\u5e76\u63d0\u4f9b\u8272\u60c5\u670d\u52a1\u7684\u4eba\uff09\u3001\u201c\u4e09\u54cd\u6d77\u8c5a\u201d\uff08\u4e00\u79cd\u8d4c\u535a\uff09\u7b49\uff0c\u8986\u76d6\u8272\u60c5\u3001\u8d4c\u535a\u3001\u6bd2\u54c1\u3001\u5371\u9669\u54c1\u7b49\u7c7b\u522b\u3002\u7814\u7a76\u8005\u8fd8\u63d0\u53d6\u4e86\u8fd9\u4e9b\u5730\u4e0b\u7ecf\u6d4e\u76f8\u5173\u7684\u8054\u7cfb\u4fe1\u606f\uff0c\u4ee5\u53ca\u5730\u4e0b\u4ea7\u4e1a\u6240\u4f7f\u7528\u7684\u591a\u79cd\u4fe1\u606f\u6df7\u6dc6\u65b9\u6cd5\u3002<\/p>\n

\u68c0\u6d4b\u65b9\u6cd5\u548c\u7ed3\u679c\u6709\u52a9\u4e8e\u51c0\u5316\u7f51\u7edc\u7a7a\u95f4\u3001\u6253\u51fb\u7f51\u7edc\u72af\u7f6a\uff0c\u5bf9\u4e8e\u7535\u5546\u5e73\u53f0\u3001\u641c\u7d22\u5f15\u64ce\u5382\u5546\u6709\u91cd\u8981\u610f\u4e49\uff0c\u5bf9\u76f8\u5173\u5a01\u80c1\u60c5\u62a5\u5e73\u53f0\u7684\u4fe1\u606f\u641c\u96c6\u4e5f\u6709\u53c2\u8003\u4ef7\u503c\u3002<\/p>\n

\u6f14\u8bb2\u4eba\uff1a\u8521\u5fe0\u95fd<\/strong><\/p>\n

\"\"<\/a><\/p>\n

\u8521\u5fe0\u95fd\u535a\u58eb\u672c\u79d1\u548c\u535a\u58eb\u6bd5\u4e1a\u4e8e\u897f\u5b89\u4ea4\u901a\u5927\u5b66\uff0c\u73b0\u4e3a\u897f\u5b89\u4ea4\u901a\u5927\u5b66\u81ea\u52a8\u5316\u7cfb\u6559\u6388\u3001\u535a\u58eb\u751f\u5bfc\u5e08\uff0c\u667a\u80fd\u7f51\u7edc\u4e0e\u7f51\u7edc\u5b89\u5168\u6559\u80b2\u90e8\u91cd\u70b9\u5b9e\u9a8c\u5ba4\u526f\u4e3b\u4efb\u3002\u8521\u5fe0\u95fd\u6559\u6388\u957f\u671f\u81f4\u529b\u4e8e\u4eba\u673a\u4ea4\u4e92\u884c\u4e3a\u5206\u6790\uff0c\u884c\u4e3a\u8ba4\u8bc1\u3001\u673a\u5668\u5b66\u4e60\u53ca\u5e94\u7528\u7b49\u65b9\u9762\u7684\u7814\u7a76\uff0c\u5728\u4fe1\u606f\u7cfb\u7edf\u5b89\u5168\u76d1\u63a7\u548c\u673a\u5668\u5b66\u4e60\u65b9\u6cd5\u7b49\u65b9\u5411\u5f00\u5c55\u4e86\u7ec6\u81f4\u6df1\u5165\u7684\u7814\u7a76\u5de5\u4f5c\uff0c\u53d6\u5f97\u4e86\u4e00\u7cfb\u5217\u91cd\u8981\u8fdb\u5c55\uff0c\u7814\u7a76\u6210\u679c\u5728Oakland\uff08S&P\uff09\uff0cTIFS\uff0cDSN\uff0cACSAC\uff0cRAID\uff0cTHMS\uff0cComputer & Security \u7b49CCF A\u3001B \u7c7b\u4f1a\u8bae\u6216\u671f\u520a\u53ca\u300a\u8ba1\u7b97\u673a\u5b66\u62a5\u300b\u3001\u300a\u8f6f\u4ef6\u5b66\u62a5\u300b\u3001\u300a\u901a\u4fe1\u5b66\u62a5\u300b\u7b49\u56fd\u5185\u6743\u5a01\u520a\u7269\u4e0a\u53d1\u8868\uff0c\u76ee\u524dGoogle \u5f15\u7528\u6b21\u6570\u8d85\u8fc7340 \u6b21\uff0c\u4ea7\u751f\u4e86\u91cd\u8981\u7684\u5b66\u672f\u5f71\u54cd\u3002\u66fe\u83b72013\u5e74\u4e2d\u56fd\u751f\u7269\u7279\u5f81\u8bc6\u522b\u5927\u4f1a\u552f\u4e00\u6700\u4f73\u8bba\u6587\u5956\uff0c\u9655\u897f\u7701\u79d1\u6280\u4e00\u7b49\u5956\uff08\u6392\u540d\u7b2c\u56db\uff09\u3002<\/p>\n

\u62a5\u544a\u9898\u76ee\uff1a\u7ed3\u5408\u624b\u578b\u548c\u884c\u4e3a\u4fe1\u606f\u7684\u591a\u6307\u89e6\u63a7\u8ba4\u8bc1
\n<\/span><\/strong><\/p>\n

\u62a5\u544a\u6458\u8981\uff1a\u76ee\u524d\u624b\u673a\u3001\u5e73\u677f\u4ee5\u53ca\u5927\u91cf\u7b14\u8bb0\u672c\u7535\u8111\u7b49\u79fb\u52a8\u8ba1\u7b97\u8bbe\u5907\u591a\u914d\u5907\u591a\u6307\u89e6\u6478\u5c4f\uff0c\u62a5\u544a\u4ecb\u7ecd\u4e86\u4e00\u79cd\u5229\u7528\u591a\u6307\u89e6\u63a7\u8bbe\u5907\u8fdb\u884c\u7528\u6237\u8eab\u4efd\u8ba4\u8bc1\u7684\u65b9\u6cd5\u3002\u8be5\u65b9\u6cd5\u7b80\u5355\u53ef\u9760\uff0c\u7528\u6237\u53ea\u9700\u6309\u7167\u7279\u5b9a\u7684\u6a21\u5f0f\u8fdb\u884c\u4e00\u6b21\u591a\u6307\u89e6\u63a7\u6ed1\u52a8\u5c31\u53ef\u5b8c\u6210\u8eab\u4efd\u9a8c\u8bc1\u3002\u901a\u8fc7\u7ed3\u5408\u624b\u578b\u4e0e\u884c\u4e3a\u4fe1\u606f\uff0c\u8be5\u65b9\u6cd5\u514b\u670d\u4e86\u8bb8\u591a\u884c\u4e3a\u8ba4\u8bc1\u65b9\u6cd5\u6240\u5b58\u5728\u7684\u884c\u4e3a\u6ce2\u52a8\u95ee\u9898\u3002\u57fa\u4e8e\u91c7\u96c6\u4e8e161\u540d\u5fd7\u613f\u8005\u7684\u957f\u8fbe2\u4e2a\u6708\u7684\u6d4b\u8bd5\u6570\u636e\uff0c\u6240\u63d0\u8eab\u4efd\u8ba4\u8bc1\u65b9\u6cd5\u53ef\u4ee5\u5728\u53ea\u67095\u4e2a\u8bad\u7ec3\u6837\u672c\u7684\u60c5\u51b5\u4e0b\uff0c\u8fbe\u52305.84%\u7684\u7b49\u9519\u7387\u3002\u5f53\u8bad\u7ec3\u6837\u672c\u8db3\u591f\u65f6\uff0c\u8ba4\u8bc1\u7cbe\u5ea6\u53ef\u4ee5\u8fbe\u52301.88%\u7684\u7b49\u9519\u7387\u3002\u5b9e\u9a8c\u8fd8\u8868\u660e\uff0c\u8be5\u65b9\u6cd5\u5177\u6709\u8f83\u597d\u7684\u7528\u4f53\u9a8c\uff0c\u5e76\u4e14\u53ef\u4ee5\u62b5\u5fa1\u4f20\u7edf\u65b9\u6cd5\u5f88\u96be\u514b\u670d\u7684\u6cb9\u8ff9\u653b\u51fb\u3001\u5077\u7aa5\u653b\u51fb\u4ee5\u53ca\u7edf\u8ba1\u653b\u51fb\u3002<\/p>\n

In this talk we present a simple and reliable authentication method for mobile devices equipped with multitouch screens such as smart phones, tablets and laptops. Users are authenticated by performing specially designed multi-touch gestures with one swipe on the touchscreen. During this process, both hand geometry and behavioral characteristics are recorded in the multi-touch traces and used for authentication. By combining both geometry information and behavioral characteristics, we overcome the problem of behavioral variability plaguing many behavior based authentication techniques \u2013 which often leads to less accurate authentication or poor user experience \u2013 while also ensuring the discernibility of different users with possibly similar handshapes. We evaluate the design of the proposed authentication method thoroughly using a large multi-touch dataset collected from 161 subjects with an elaborately designed procedure to capture behavior variability. The results demonstrate that the fusion of behavioral information with hand geometry features produces effective resistance to behavioral variability over time while at the same time retains discernibility. Our approach achieves EER of 5.84% with only 5 training samples and the performance is further improved to EER of 1.88% with enough training. Security analyses are also conducted to demonstrate that the proposed method is resilient against common smartphone authentication threats such as smudge attack, shoulder surfing attack and statistical attack. Finally, user acceptance of the method is illustrated via a usability study.<\/p>\n

\u6f14\u8bb2\u4eba<\/b><\/strong>\uff1a\u738b\u9e4f\u98de<\/strong><\/p>\n

\"\"<\/a><\/p>\n

\u535a\u58eb\u751f\uff0c\u56fd\u9632\u79d1\u5b66\u6280\u672f\u5927\u5b66\u8ba1\u7b97\u673a\u5b66\u9662\u7f51\u7edc\u5b89\u5168\u5b9e\u9a8c\u5ba4\uff0c\u5bfc\u5e08\u662f\u5362\u51ef\u7814\u7a76\u5458\u548c\u674e\u6839\u52a9\u7406\u7814\u7a76\u5458\u3002\u7814\u7a76\u9886\u57df\u4e3a\u7cfb\u7edf\u5b89\u5168\uff0c\u5e76\u884c\u7a0b\u5e8f\u5206\u6790\u7b49\u30022015-2016\u5e74\u5728\u82f1\u56fd\u4f26\u6566\u5927\u5b66\u5b66\u9662CREST\u7814\u7a76\u4e2d\u5fc3\u8bbf\u5b66\uff0c\u4e0eJens Krinke\u5408\u4f5c\u7814\u7a76double fetch\u95ee\u9898\uff0c\u64b0\u5199\u8bba\u6587\u201cHow Double-Fetch Situations turn into Double-Fetch Vulnerabilities: A Study of Double Fetches in the Linux Kernel\u201d\u53d1\u8868\u5728\u7cfb\u7edf\u5b89\u5168\u9886\u57df\u8457\u540d\u4f1a\u8baeUSENIX Security 2017\u3002<\/p>\n

\u62a5\u544a\u9898\u76ee\uff1a\u9488\u5bf9Linux\u4e2ddouble fetch\u6f0f\u6d1e\u7684\u7814\u7a76<\/span><\/strong><\/p>\n

\uff08How Double-Fetch Situations turn into Double-Fetch Vulnerabilities:<\/p>\n

A Study of Double Fetches in the Linux Kernel\uff09<\/p>\n

\u62a5\u544a<\/b><\/strong>\u6458\u8981<\/b><\/strong>\uff1a\u8fd1\u5e74\u6765\uff0c\u5e76\u884c\u7a0b\u5e8f\u968f\u7740\u591a\u6838CPU\u786c\u4ef6\u7684\u666e\u53ca\u800c\u88ab\u8d8a\u6765\u8d8a\u5e7f\u6cdb\u7684\u4f7f\u7528\u3002\u800c\u5e76\u884c\u7a0b\u5e8f\u4e2d\u666e\u904d\u5b58\u5728\u6570\u636e\u7ade\u4e89\u7684\u60c5\u51b5\uff0c\u5e76\u80fd\u5bfc\u81f4\u591a\u79cd\u5e76\u53d1\u9519\u8bef\u3002\u5f53\u7ade\u4e89\u60c5\u51b5\u53d1\u751f\u5728\u5185\u6838\u4e0e\u7528\u6237\u7ebf\u7a0b\u4e4b\u95f4\u65f6\uff0c\u5c31\u4f1a\u89e6\u53d1double fetch\u6f0f\u6d1e\u3002\u6211\u4eec\u63d0\u51fa\u4e86\u4e00\u79cd\u9759\u6001\u65b9\u6cd5\u6765\u7cfb\u7edf\u68c0\u6d4bLinux\u5185\u6838\u4e2d\u5b58\u5728\u7684\u6f5c\u5728double fetch\u60c5\u51b5\u3002\u6240\u63d0\u65b9\u6cd5\u57fa\u4e8e\u7279\u5b9a\u6a21\u5f0f\u5206\u6790\uff0c\u603b\u5171\u4eceLinux\u5185\u6838\u4e2d\u8bc6\u522b\u4e8690\u4e2adouble fetch\u60c5\u51b5\uff0c\u5176\u4e2d57\u4e2a\u53d1\u751f\u5728\u9a71\u52a8\u7a0b\u5e8f\u4e2d\u3002\u6240\u63d0\u65b9\u6cd5\u6709\u6548\u586b\u8865\u4e86\u4e4b\u524d\u5e7f\u6cdb\u4f7f\u7528\u7684\u52a8\u6001\u68c0\u6d4b\u65b9\u6cd5\u56e0\u4e3a\u4f9d\u8d56\u7279\u5b9a\u786c\u4ef6\u6240\u4ee5\u4e0d\u9002\u7528\u4e8e\u9a71\u52a8\u7a0b\u5e8f\u68c0\u6d4b\u7684\u4e0d\u8db3\u3002\u5728\u8fdb\u4e00\u6b65\u4eba\u5de5\u5206\u6790\u7684\u57fa\u7840\u4e0a\uff0c\u6211\u4eec\u5f52\u7eb3\u4e863\u79cd\u5185\u6838\u4e2d\u5bb9\u6613\u5f15\u53d1double fetch\u7684\u5178\u578b\u573a\u666f\uff0c\u5e76\u8fdb\u884c\u6848\u4f8b\u5206\u6790\u3002\u6211\u4eec\u6240\u63d0\u65b9\u6cd5\u57fa\u4e8eCoccinelle\u5f15\u64ce\uff0c\u80fd\u6709\u6548\u68c0\u6d4b\u5f15\u8d77\u5185\u6838\u6f0f\u6d1e\u7684double fetch\u95ee\u9898\u3002\u6211\u4eec\u5c06\u6b64\u65b9\u6cd5\u5e94\u7528\u4e8eLinux\uff0cFreeBSD \u548cAndroid\u5185\u6838\u5e76\u53d1\u73b0\u4e866\u4e2a\u4e4b\u524d\u672a\u77e5\u7684double fetch\u7f3a\u9677\uff0c\u5176\u4e2d4\u4e2a\u5728\u9a71\u52a8\u7a0b\u5e8f\u4e2d\uff0c3\u4e2a\u662f\u53ef\u5229\u7528\u7684double fetch\u6f0f\u6d1e\u3002\u6240\u6709\u5df2\u53d1\u73b0\u7684\u7f3a\u9677\u548c\u6f0f\u6d1e\u90fd\u5df2\u7ecf\u88ab\u5185\u6838\u5f00\u53d1\u56e2\u961f\u786e\u8ba4\u5e76\u6253\u4e0a\u8865\u4e01\u3002\u6211\u4eec\u7684\u65b9\u6cd5\u5df2\u7ecf\u88abCoccinelle\u56e2\u961f\u91c7\u7528\u5e76\u96c6\u6210\u5230Linux\u5185\u6838\u8865\u4e01\u5ba1\u8ba1\u4e2d\u3002\u57fa\u4e8e\u4ee5\u4e0a\u7814\u7a76\uff0c\u6211\u4eec\u8fd8\u63d0\u51fa\u4e86\u5b9e\u7528\u6027\u65b9\u6cd5\u6765\u9884\u9632double fetch \u7f3a\u9677\u548c\u6f0f\u6d1e\u3002\u6211\u4eec\u8fd8\u63d0\u51fa\u4e86\u4e00\u79cd\u81ea\u52a8\u4e3a\u68c0\u6d4b\u5230\u7684double fetch\u7f3a\u9677\u6253\u8865\u4e01\u7684\u65b9\u6cd5\u3002<\/p>\n

The wide use of multi-core hardware is making concurrent\u00a0programs increasingly pervasive\u3002Data races\u00a0are common situations\u00a0in concurrent\u00a0programs\u00a0which could cause multiple concurrency bugs. A double fetch bug is caused by the special race condition between kernel and user space. We present the first static approach that systematically\u00a0detects potential double-fetch vulnerabilities in the Linux\u00a0kernel. Using a pattern-based analysis, we identified 90\u00a0double fetches in the Linux kernel. 57 of these occur\u00a0in drivers, which previous dynamic approaches were unable\u00a0to detect without access to the corresponding hardware.\u00a0We manually investigated the 90 occurrences, and\u00a0inferred three typical scenarios in which double fetches\u00a0occur. We discuss each of them in detail. We further developed\u00a0a static analysis, based on the Coccinelle matching\u00a0engine, that detects double-fetch situations which can\u00a0cause kernel vulnerabilities. When applied to the Linux,\u00a0FreeBSD, and Android kernels, our approach found six\u00a0previously unknown double-fetch bugs, four of them in\u00a0drivers, three of which are exploitable double-fetch vulnerabilities.\u00a0All of the identified bugs and vulnerabilities\u00a0have been confirmed and patched by maintainers. Our\u00a0approach has been adopted by the Coccinelle team and\u00a0is currently being integrated into the Linux kernel patch\u00a0vetting. Based on our study, we also provide practical solutions\u00a0for anticipating double-fetch bugs and vulnerabilities.\u00a0We also provide a solution to automatically patch\u00a0detected double-fetch bugs.<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

6\u670810\u65e5InForSec@\u4e2d\u56fd\u79d1\u5b66\u6280\u672f\u5927\u5b66\u6d3b\u52a8\u9884\u544a \u5730\u70b9\uff1a\u4e2d\u56fd\u79d1\u5b66\u6280\u672f\u5927\u5b66\u897f\u533a\u7535\u4e09\u697c314\u5ba4 \u65f6\u95f4… Continue reading → <\/span><\/a><\/p>\n","protected":false},"author":7,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-2020","post","type-post","status-publish","format-standard","hentry","category-events"],"_links":{"self":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts\/2020","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2020"}],"version-history":[{"count":9,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts\/2020\/revisions"}],"predecessor-version":[{"id":2033,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=\/wp\/v2\/posts\/2020\/revisions\/2033"}],"wp:attachment":[{"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2020"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2020"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/202.112.238.40\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2020"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}