Implementing File Systems to Minimize Security Threats

Implementation problems that pose security threats fall into a set of common issues:

• Buffer handling.

• Authentication and identification.

• Access control.

• Handle management.

None of these issues is particularly novel. These issues are well known, yet these problems recur in drivers. Part of the problem is that most existing development tools do not warn users or mitigate against these types of problems. However, using judicious defensive development techniques, most of these problems can be eliminated.

This section includes the following topics:

Buffer Handling

Authentication and Identification

Access Control

Handle Management