辅助检测Linux驱动中漏洞的符号驱动环境  

Symbolic driver environment:a tool aided to detect Linux driver bugs

作　　者：范文良[1] 茅俊杰[1] 肖奇学[1] 徐永健[1] 杨维康[1] 陈渝[1] 

机构地区：[1]清华大学计算机科学与技术系,北京100084

出　　处：《计算机工程与科学》2015年第6期1058-1063,共6页Computer Engineering & Science

基　　金：国家自然科学基金资助项目(61170050);核高基重大专项基金资助项目(2012ZX01039-004)

摘　　要：Linux系统中的驱动漏洞被证实是内核漏洞的主要来源,可以被利用导致严重的安全问题。通过系统模型、驱动与内核的交互和驱动与设备的交互这三部分的设计与实现,构建了符号驱动环境,用于辅助检测Linux驱动中的漏洞。使用符号驱动环境对两个真实的驱动进行检测,成功检测出了两个漏洞,证实了该工具的可行性。与SymDrive工具的性能相比,符号驱动环境执行速度快90%,覆盖率提高20%。It has been proved that Linux driver bugs are the major bug source of the whole system, which can lead to serious security problems. A tool called symbolic driver environment （SDE） is designed to detect Linux driver bugs, which consists of the system model, the interactions between driver and kernel, and the interactions between driver and device. Using SDE, we detect two real Linux drivers, and find two bugs. The results prove that the tool is feasible, and the speed is 90% faster and the coverage is 20% larger compared with an existing tool called SymDrive.

关 键 词：驱动漏洞 漏洞检测 符号执行 驱动环境 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]