Assume that there is a system call connect). This system call takes an IP address as an argument and then creates a TCP connection with that IP address. For example, connect(10.10.10.10) will create a TCP connection with the machine that has the IP address 10.10.10.10. Now, imagine that for the ptrace sandbox, the connect() system call is blocked for a known bad IP address 20.20.20.20. However, the attacker wants to connect to this blocked IP address (the attacker wants a TCP connection to 20.20.20.20, which is not allowed in the policy). It is also given that the connect() system call is allowed for the IP address 1.1.1.1. What can the attacker do to bypass this restriction and trick the ptrace sandbox (and the Operating System) Into running the connect() system call with the argument 20.20.20.207

Database System Concepts
7th Edition
ISBN:9780078022159
Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan
Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan
Chapter1: Introduction
Section: Chapter Questions
Problem 1PE
icon
Related questions
Question
Assume that there is a system call connect). This system call takes an IP address as an
argument and then creates a TCP connection with that IP address. For example,
connect(10.10.10.10) will create a TCP connection with the machine that has the IP address
10.10.10.10. Now, imagine that for the ptrace sandbox, the connect() system call is blocked for a
known bad IP address 20.20.20.20. However, the attacker wants to connect to this blocked IP
address (the attacker wants a TCP connection to 20.20.20.20, which is not allowed in the policy).
It is also given that the connect() system call is allowed for the IP address 1.1.1.1. What can the
attacker do to bypass this restriction and trick the ptrace sandbox (and the Operating System)
Into running the connect() system call with the argument 20.20.20.207
Transcribed Image Text:Assume that there is a system call connect). This system call takes an IP address as an argument and then creates a TCP connection with that IP address. For example, connect(10.10.10.10) will create a TCP connection with the machine that has the IP address 10.10.10.10. Now, imagine that for the ptrace sandbox, the connect() system call is blocked for a known bad IP address 20.20.20.20. However, the attacker wants to connect to this blocked IP address (the attacker wants a TCP connection to 20.20.20.20, which is not allowed in the policy). It is also given that the connect() system call is allowed for the IP address 1.1.1.1. What can the attacker do to bypass this restriction and trick the ptrace sandbox (and the Operating System) Into running the connect() system call with the argument 20.20.20.207
Expert Solution
steps

Step by step

Solved in 2 steps with 1 images

Blurred answer
Knowledge Booster
Network Protocols
Learn more about
Need a deep-dive on the concept behind this application? Look no further. Learn more about this topic, computer-science and related others by exploring similar questions and additional content below.
Similar questions
  • SEE MORE QUESTIONS
Recommended textbooks for you
Database System Concepts
Database System Concepts
Computer Science
ISBN:
9780078022159
Author:
Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan
Publisher:
McGraw-Hill Education
Starting Out with Python (4th Edition)
Starting Out with Python (4th Edition)
Computer Science
ISBN:
9780134444321
Author:
Tony Gaddis
Publisher:
PEARSON
Digital Fundamentals (11th Edition)
Digital Fundamentals (11th Edition)
Computer Science
ISBN:
9780132737968
Author:
Thomas L. Floyd
Publisher:
PEARSON
C How to Program (8th Edition)
C How to Program (8th Edition)
Computer Science
ISBN:
9780133976892
Author:
Paul J. Deitel, Harvey Deitel
Publisher:
PEARSON
Database Systems: Design, Implementation, & Manag…
Database Systems: Design, Implementation, & Manag…
Computer Science
ISBN:
9781337627900
Author:
Carlos Coronel, Steven Morris
Publisher:
Cengage Learning
Programmable Logic Controllers
Programmable Logic Controllers
Computer Science
ISBN:
9780073373843
Author:
Frank D. Petruzella
Publisher:
McGraw-Hill Education