\begin{thebibliography}{10}

\bibitem{chuvakin:chroot}
A.~Chuvakin.
\newblock Using {C}hroot {S}ecurely.
\newblock \url{http://www.linuxsecurity.com/content/view/117632/49/}.
\newblock [Online, accessed 17-December-2009].

\bibitem{debian:secureapt}
Debian.
\newblock All about secure apt.
\newblock \url{http://wiki.debian.org/SecureApt}.
\newblock [Online, accessed 16-December-2009].

\bibitem{debian:secfaq}
Debian.
\newblock Debian security {FAQ}.
\newblock \url{http://www.debian.org/security/faq#oldversion}.
\newblock [Online, accessed 16-December-2009].

\bibitem{dejesus:updates}
E.~X. DeJesus.
\newblock Linux patch problems: Your distro may vary.
\newblock
  \url{http://searchsecurity.techtarget.com/news/article/0,289142,sid14_gci120%
2417,00.html}.
\newblock [Online, accessed 16-December-2009].

\bibitem{eigler:mudflap}
F.~C. Eigler.
\newblock Mudflap: {P}ointer {U}se {C}hecking for {C}/{C}++.
\newblock In {\em GCC Developers Summit 2003}. GCC Developers, May 2003.

\bibitem{phk:malloc}
P.-H. Kemp.
\newblock Malloc(3) revisited.
\newblock \url{http://phk.freebsd.dk/pubs/malloc.pdf}.
\newblock [Online, accessed 16-December-2009].

\bibitem{phk:jails}
P.-H. Kemp and R.~N.~M. Watson.
\newblock Jails: Confining the omnipotent root.
\newblock \url{http://phk.freebsd.dk/pubs/sane2000-jail.pdf}.
\newblock [Online, accessed 17-December-2009].

\bibitem{rjk:cgotchas}
R.~Kettlewell.
\newblock C {L}anguage {G}otchas.
\newblock \url{http://www.greenend.org.uk/rjk/2001/02/cfu.html}.
\newblock [Online, accessed 16-December-2009].

\bibitem{kiezun:xss}
A.~Kie{\.z}un, P.~J. Guo, K.~Jayaraman, and M.~D. Ernst.
\newblock Automatic creation of {SQL} injection and cross-site scripting
  attacks.
\newblock In {\em ICSE'09, Proceedings of the 30th International Conference on
  Software Engineering}, Vancouver, BC, Canada, May~20--22, 2009.

\bibitem{krahmer:nx}
S.~Krahmer.
\newblock x86-64 buffer overflow exploits and the borrowed code chunks
  exploitation technique.
\newblock \url{http://www.suse.de/~krahmer/no-nx.pdf}, September 2005.
\newblock [Online, accessed 17-December-2009].

\bibitem{man:capab}
{L}inux {M}an~{P}age {P}roject.
\newblock capabilities - overview of linux capabilities.
\newblock \url{http://linux.die.net/man/7/capabilities}.
\newblock [Online, accessed 29-January-2010].

\bibitem{smalley:selinux}
P.~A. Loscocco and S.~D. Smalley.
\newblock Meeting {C}ritical {S}ecurity {O}bjectives with {S}ecurity-{E}nhanced
  {L}inux.
\newblock In {\em Proceedings of the 2001 Ottawa Linux Symposium}, July 2001.

\bibitem{mcclure:hackexposed}
S.~McClure.
\newblock {\em Hacking Exposed}, chapter Hacking Unix.
\newblock McGraw-Hill Professional, 6th edition, March 2009.

\bibitem{seward:valgrind}
N.~Nethercote and J.~Seward.
\newblock Valgrind: a framework for heavyweight dynamic binary instrumentation.
\newblock In {\em PLDI '07: Proceedings of the 2007 ACM SIGPLAN conference on
  Programming language design and implementation}, pages 89--100, New York, NY,
  USA, 2007. ACM.

\bibitem{postfix:security}
Postfix.
\newblock Postfix {O}verview --- {S}ecurity.
\newblock \url{http://www.postfix.org/security.html}.
\newblock [Online, accessed 16-December-2009].

\bibitem{securityfocus:capab}
J.~Rauch.
\newblock Introduction to {L}inux {C}apabilities and {ACL}s.
\newblock \url{http://www.securityfocus.com/infocus/1400}.
\newblock [Online, accessed 16-December-2009].

\bibitem{sun:zone}
{S}un {M}icrosystems.
\newblock {S}ystem {A}dministration {G}uide: {S}olaris {C}ontainers -
  {R}esource {M}anagement and {S}olaris {Z}ones.
\newblock \url{http://dlc.sun.com/pdf/817-1592/817-1592.pdf}.
\newblock [Online, accessed 8-February-2010].

\bibitem{hoogeveen:zones}
J.~P. van Hoogeveen.
\newblock Working with {S}olaris {C}ontainers and the {S}olaris {S}ervice
  {M}anager.
\newblock \url{http://www.sun.com/blueprints/0506/819-4328.pdf}.
\newblock [Online, accessed 17-December-2009].

\bibitem{sprundel:fuzzer}
I.~van Sprundel.
\newblock Fuzzing: Breaking software in an automated fashion.
\newblock In {\em 22nd Chaos Communication Congress}. Chaos Computer Club,
  December 2005.

\bibitem{wp:propolice}
Wikipedia.
\newblock Buffer overflow protection --- {W}ikipedia{,} the free encyclopedia.
\newblock
  \url{http://en.wikipedia.org/w/index.php?title=Buffer_overflow_protection&ol%
did=333698084}.

\bibitem{wp:linux}
Wikipedia.
\newblock Linux --- {W}ikipedia{,} the free encyclopedia.
\newblock
  \url{http://en.wikipedia.org/w/index.php?title=Linux&oldid=332101608}.

\bibitem{wp:unix}
Wikipedia.
\newblock Unix --- {W}ikipedia{,} the free encyclopedia.
\newblock \url{http://en.wikipedia.org/w/index.php?title=Unix&oldid=331924360}.

\bibitem{wp:neumann}
Wikipedia.
\newblock Von {N}eumann architecture --- {W}ikipedia{,} the free encyclopedia.
\newblock
  \url{http://en.wikipedia.org/w/index.php?title=Von_Neumann_architecture&oldi%
d=330479010}.

\end{thebibliography}
