Mandatory access control implantation against potential NFS vulnerabilities - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2009

Mandatory access control implantation against potential NFS vulnerabilities

Résumé

This paper proposes a technical solution for protecting users using a shared NFS service possibly controlled by a malicious user. The main goal is to protect the integrity and confidentiality of user's resources. Moreover, we propose to solve a more difficult challenge: how to prevent a malicious user from exploiting a supposed NFS vulnerability in order to read or write the resources of another user? Thus, this paper assumes that a vulnerability might exist in the NFS protocol or software components that gives the ability to a malicious user to execute any arbitrary code on the NFS server. Technical details about the implantation of Mandatory Access Control mechanisms with Multi Categories on the server side are given. The proposed solution avoids heavy modifications of the clients and only relies on the authentication of these clients.
Fichier non déposé

Dates et versions

hal-00451794 , version 1 (31-01-2010)

Identifiants

Citer

Mathieu Blanc, Kévin Guérin, Jean-François Lalande, Vincent Le Port. Mandatory access control implantation against potential NFS vulnerabilities. Workshop on Collaboration and Security 2009, May 2009, Baltimore, United States. pp.195-200, ⟨10.1109/CTS.2009.5067481⟩. ⟨hal-00451794⟩
101 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More