@conference {12093,
	title = {Applying flow-sensitive CQUAL to verify MINIX authorization check placement},
	booktitle = {Proceedings of the 2006 workshop on Programming languages and analysis for security},
	series = {PLAS {\textquoteright}06},
	year = {2006},
	month = {2006///},
	pages = {3 - 6},
	publisher = {ACM},
	organization = {ACM},
	address = {Ottawa, Ontario, Canada},
	abstract = {We present the first use of flow-sensitive CQUAL to verify the placement of operating system authorization checks. Our analysis of MINIX 3 system servers and discovery of a non-exploitable Time-Of-Check/Time-Of-Use bug demonstrate the effectiveness of flow sensitive CQUAL and its advantage over earlier flow-insensitive versions. We also identify and suggest alternatives to current CQUAL usability features that encourage analysts to make omissions that cause the otherwise sound tool to produce false-negative results.},
	keywords = {access controls, cqual, minix},
	isbn = {1-59593-374-3},
	doi = {10.1145/1134744.1134747},
	author = {Fraser,Timothy and Petroni,Jr. and Arbaugh, William A.}
}
