GATE2002-2.20

Question

Dynamic linking can cause security concerns because

• A. Security is dynamic
• B. The path for searching dynamic libraries is not known till runtime
• C. Linking is insecure
• D. Cryptographic procedures are not available for dynamic linking

Answer 1

• A. Nonsense option, No idea why it is here.
• B. The path for searching dynamic libraries is not known till runtime -> This seems most correct answer.
• C. This is not true. Linking in itself not insecure.
• D. There is no relation between Cryptographic procedures & Dynamic linking.

Comments

Lol! nice answer for option A.

---

i liked option a answer :P :D

---

how can  option (B) cause security concerns?

---

Anyone explain the B option ....

---

process should access only area which is allocated to it .if it has permission then only it can access the other process resource.with hardware we can restrict the process to access the addresses between base and limit.

In case of dynamic linking process may access the resource of other process so OS should take care of it .

In case malware try to access the other process resource which it should not ,OS must take care of such unauthorized access.

also check this:https://stackoverflow.com/questions/4136582/dynamic-linking-is-less-secure

---

In dynamic linkin, all external references are that of a stub.

A stub is a piece of code which knows how to locate and load the appropriate memory resident library routine which is needed.

So, if this stub contains the address of a malicious code, then security is a concern.

Answer 2

Dynamic linking is type of linking in which libraries required by the program are linked during run time.

And evaluating all options B seems correct one.

Comments

@Bikram Sir Dynamic linking is not making any sense with cryptography  for security, option B seems to be correct.

---

yes there is no relation between cryptography and dynamic linking.

---

Thanks, Sir.

---

@Bikram sir

option B is true.  but how can  it cause security concerns ?

sir give me some real time example  please

Answer 3

b.   path is not  not  known  so it's  not  easy to intruder to place malicious program.

Comments

Is this can be a logic?