Ted Leung on the air
Ted Leung on the air: Open Source, Java, Python, and ...
Ted Leung on the air: Open Source, Java, Python, and ...
Sun, 01 Jun 2003
Denial of Service via Algorithmic Complexity Attacks
Every once in a a while Slashdot comes up with a gem. Crosby and Wallach's new paper
Denial of Service via Algorithmic Complexity Attacks is one such gem. It was inevitable that attacks would start to exploit properties of particular data structures. At least they provided a library that is resistent to the attacks that they discuss.
I wish that there were a more reliable way to find out about these kinds of papers. I'd love it if university research groups, or Citeseer, or the ACM, IEEE, and USENIX would provide RSS feeds that I could subscribe too. If I was doing research, I'd definitely posting about it here on my blog.
[14:31] |
[computers] |
# |
TB |
F |
G |
0 Comments |
Stringing ourselves along
Don Park posted a pointer to a comparison of C string libraries by the author of Vstr. I count 22 different libraries, some of which overlap in purpose and functionality. I'm all for letting a thousand (or 22) flower bloom, but its also discouraging to see so many versions of the same thing, especially when strings are a foundational programming construct, and the source of many programming errors.
[12:46] |
[computers/programming] |
# |
TB |
F |
G |
1 Comments |
More on VMWare and honeypots
Why is it that as soon as I start to notice a topic, that all of a sudden a flood of articles seems to appear. The HoneyNet project has had a paper on VMWare and Honeypots since January of this year, but it only got blogged in the last few days.
[12:37] |
[computers/operating_systems] |
# |
TB |
F |
G |
0 Comments |