{"id":"https://openalex.org/W4226400063","doi":"https://doi.org/10.1109/tdsc.2022.3165368","title":"Automatic Permission Check Analysis for Linux Kernel","display_name":"Automatic Permission Check Analysis for Linux Kernel","publication_year":2022,"publication_date":"2022-01-01","ids":{"openalex":"https://openalex.org/W4226400063","doi":"https://doi.org/10.1109/tdsc.2022.3165368"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2022.3165368","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2022.3165368","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5077223996","display_name":"Jinmeng Zhou","orcid":null},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jinmeng Zhou","raw_affiliation_strings":["Institute of Cyberspace Research, Zhejiang University, 12377 Hangzhou, Zhejiang, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Cyberspace Research, Zhejiang University, 12377 Hangzhou, Zhejiang, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100378792","display_name":"Tong Zhang","orcid":"https://orcid.org/0000-0002-5511-2558"},"institutions":[{"id":"https://openalex.org/I4210101778","display_name":"Samsung (United States)","ror":"https://ror.org/01bfbvm65","country_code":"US","type":"company","lineage":["https://openalex.org/I2250650973","https://openalex.org/I4210101778"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tong Zhang","raw_affiliation_strings":["Security team, Samsung Electronics, 65665 San Francisco Bay Area, California, United States"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Security team, Samsung Electronics, 65665 San Francisco Bay Area, California, United States","institution_ids":["https://openalex.org/I4210101778"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039734151","display_name":"Wenbo Shen","orcid":"https://orcid.org/0000-0003-2899-6121"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenbo Shen","raw_affiliation_strings":["Institute of Cyberspace Research, Zhejiang University, 12377 Hangzhou, Zhejiang, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Cyberspace Research, Zhejiang University, 12377 Hangzhou, Zhejiang, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065310265","display_name":"Dongyoon Lee","orcid":"https://orcid.org/0000-0002-2240-3316"},"institutions":[{"id":"https://openalex.org/I59553526","display_name":"Stony Brook University","ror":"https://ror.org/05qghxh33","country_code":"US","type":"education","lineage":["https://openalex.org/I59553526"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dongyoon Lee","raw_affiliation_strings":["Department of Computer Science, Stony Brook University, 12301 Stony Brook, New York, United States"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Stony Brook University, 12301 Stony Brook, New York, United States","institution_ids":["https://openalex.org/I59553526"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102903612","display_name":"Changhee Jung","orcid":"https://orcid.org/0000-0002-6422-6549"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Changhee Jung","raw_affiliation_strings":["Department of Computer Science, Purdue University, 311308 West Lafayette, Indiana, United States"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Purdue University, 311308 West Lafayette, Indiana, United States","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017015283","display_name":"Ahmed Azab","orcid":"https://orcid.org/0000-0002-1520-9566"},"institutions":[{"id":"https://openalex.org/I4210114444","display_name":"Meta (United States)","ror":"https://ror.org/01zbnvs85","country_code":"US","type":"company","lineage":["https://openalex.org/I4210114444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ahmed Azab","raw_affiliation_strings":["Security team, Facebook Inc, 342996 San Francisco Bay Area, California, United States"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Security team, Facebook Inc, 342996 San Francisco Bay Area, California, United States","institution_ids":["https://openalex.org/I4210114444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058741917","display_name":"Ruowen Wang","orcid":"https://orcid.org/0000-0002-9131-1861"},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ruowen Wang","raw_affiliation_strings":["Security team, Google Inc, 93176 Sunnyvale, California, United States"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Security team, Google Inc, 93176 Sunnyvale, California, United States","institution_ids":["https://openalex.org/I1291425158"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016753473","display_name":"Peng Ning","orcid":"https://orcid.org/0000-0002-1455-9919"},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Peng Ning","raw_affiliation_strings":["Security team, Google Inc, 93176 Sunnyvale, California, United States"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Security team, Google Inc, 93176 Sunnyvale, California, United States","institution_ids":["https://openalex.org/I1291425158"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5105297718","display_name":"Kui Ren","orcid":"https://orcid.org/0000-0002-1969-2591"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kui Ren","raw_affiliation_strings":["Institute of Cyberspace Research, Zhejiang University, 12377 Hangzhou, Zhejiang, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Cyberspace Research, Zhejiang University, 12377 Hangzhou, Zhejiang, China","institution_ids":["https://openalex.org/I76130692"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2195,"currency":"USD","value_usd":2195},"apc_paid":null,"fwci":0.5124,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.70751454,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"1"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9947999715805054,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9947999715805054,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9811000227928162,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.977400004863739,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/permission","display_name":"Permission","score":0.9779849052429199},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8480767011642456},{"id":"https://openalex.org/keywords/linux-kernel","display_name":"Linux kernel","score":0.6933338642120361},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.5494049787521362},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.46318861842155457},{"id":"https://openalex.org/keywords/control-flow","display_name":"Control flow","score":0.4628452658653259},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.4132583737373352},{"id":"https://openalex.org/keywords/control-flow-graph","display_name":"Control flow graph","score":0.4108015298843384},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.3837892711162567},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.332261323928833}],"concepts":[{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.9779849052429199},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8480767011642456},{"id":"https://openalex.org/C553261973","wikidata":"https://www.wikidata.org/wiki/Q14579","display_name":"Linux kernel","level":2,"score":0.6933338642120361},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.5494049787521362},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.46318861842155457},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.4628452658653259},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.4132583737373352},{"id":"https://openalex.org/C27458966","wikidata":"https://www.wikidata.org/wiki/Q1187693","display_name":"Control flow graph","level":2,"score":0.4108015298843384},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.3837892711162567},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.332261323928833},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2022.3165368","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2022.3165368","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.800000011920929,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":37,"referenced_works":["https://openalex.org/W592737103","https://openalex.org/W1516432943","https://openalex.org/W1997199359","https://openalex.org/W2007686997","https://openalex.org/W2022363576","https://openalex.org/W2028820179","https://openalex.org/W2078186835","https://openalex.org/W2087248300","https://openalex.org/W2117948828","https://openalex.org/W2140095007","https://openalex.org/W2141179168","https://openalex.org/W2141736438","https://openalex.org/W2145911832","https://openalex.org/W2161337603","https://openalex.org/W2297774820","https://openalex.org/W2538805569","https://openalex.org/W2573570214","https://openalex.org/W2792181598","https://openalex.org/W2793974819","https://openalex.org/W2891748016","https://openalex.org/W3004040842","https://openalex.org/W3004291881","https://openalex.org/W3005402394","https://openalex.org/W3147482974","https://openalex.org/W4246166885","https://openalex.org/W4255701563","https://openalex.org/W6630914723","https://openalex.org/W6634746302","https://openalex.org/W6637688222","https://openalex.org/W6639981184","https://openalex.org/W6680398462","https://openalex.org/W6687742033","https://openalex.org/W6714048833","https://openalex.org/W6723270624","https://openalex.org/W6743674419","https://openalex.org/W6743843626","https://openalex.org/W6766726536"],"related_works":["https://openalex.org/W2138385884","https://openalex.org/W2166895275","https://openalex.org/W157564837","https://openalex.org/W2080313875","https://openalex.org/W2998775986","https://openalex.org/W2011536294","https://openalex.org/W1724049288","https://openalex.org/W4384302888","https://openalex.org/W2135849267","https://openalex.org/W2111825754"],"abstract_inverted_index":{"Permission":[0],"checks":[1,31,124,131,152],"play":[2],"an":[3],"essential":[4],"role":[5],"in":[6],"operating":[7],"system":[8],"security":[9],"by":[10,118,195],"providing":[11],"access":[12],"control":[13,114],"to":[14,24,33,144,147],"privileged":[15,133,137],"functionalities.":[16],"However,":[17],"it":[18],"is":[19,62],"challenging":[20],"for":[21,74,166],"kernel":[22,45,81,164,197],"developers":[23],"scalably":[25],"verify":[26],"the":[27,34,40,112,127,145,160,196],"soundness":[28],"of":[29,39,48,50,54,169,190],"existing":[30],"due":[32],"large":[35],"codebase":[36],"and":[37,57,84,89,105,125,132,177],"complexity":[38,61],"kernel.":[41],"In":[42],"fact,":[43],"Linux":[44,163,178],"contains":[46],"millions":[47],"lines":[49],"code":[51,83],"with":[52],"hundreds":[53],"permission":[55,70,91,123,130,151,170,186],"checks,":[56],"even":[58],"worse":[59],"its":[60],"fast-growing.":[63],"This":[64],"paper":[65],"presents":[66],"PeX,":[67],"a":[68,80,102],"static":[69],"check":[71,148,187],"error":[72],"detector":[73],"Linux,":[75],"which":[76,191],"takes":[77],"as":[78],"input":[79],"source":[82],"reports":[85],"any":[86],"missing,":[87],"inconsistent,":[88],"redundant":[90],"checks.":[92],"PeX":[93,120,139,158,182],"uses":[94],"KIRIN":[95],"(Kernel":[96],"InteRface":[97],"based":[98],"Indirect":[99],"call":[100,108],"aNalysis),":[101],"novel,":[103],"precise,":[104],"scalable":[106],"indirect":[107],"analysis":[109],"technique.":[110],"Over":[111],"interprocedural":[113],"flow":[115],"graph":[116],"built":[117],"KIRIN,":[119],"automatically":[121],"identifies":[122],"infers":[126],"mappings":[128],"between":[129],"functions.":[134],"For":[135],"each":[136],"function,":[138],"examines":[140],"all":[141],"possible":[142],"paths":[143],"function":[146],"if":[149],"necessary":[150],"are":[153],"correctly":[154],"enforced.":[155],"We":[156],"evaluated":[157],"on":[159],"latest":[161],"stable":[162],"v4.18.5":[165],"three":[167],"types":[168],"checks:":[171],"Discretionary":[172],"Access":[173],"Controls":[174],"(DAC),":[175],"Capabilities,":[176],"Security":[179],"Modules":[180],"(LSM).":[181],"reported":[183],"45":[184],"new":[185],"errors,":[188],"17":[189],"have":[192],"been":[193],"confirmed":[194],"developers.":[198]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1}],"updated_date":"2026-08-28T12:50:07.497085","created_date":"2025-10-10T00:00:00"}