Cognitive Scaffold

Preparing your thinking workspace

arrow_back_ios_new
MENTAL MODEL · M0112

TOCTOU - Time-of-check to time-of-use

TOCTOU - Time-of-check to time-of-use
DecideHigh supportDecision Science
Included
account_tree

Version 1.0.0 · Updated 2026-07-30

CORE DEFINITION

A software vulnerability that occurs when there is a time gap between the system checking a condition (such as file permissions) and actually using the resource, during which an attacker can exploit the gap to change the system state.

SCAFFOLDING EFFECT

psychology

Reduce cognitive load

Beware of lag in dynamic changes. In real life, it is a microcosm of 'marking the boat to find the sword': when you finish your research (Check) and are ready to act (Use), the environment may have changed. The longer the interval between decision and execution, the greater the TOCTOU risk.

anchor

Anchor fast decisions

Distinguish between the 'time when the check (verification) occurs' and the 'time when the checked object is actually used'. When the two are separated, ensure that the property holds before use.

MINIMUM ACTION

In progress 0/3

Practice this model in one real situation:

Check to track your progress (stored locally)
Learning progress0%
account_treeGenealogyexpand_more
menu_bookReferencesexpand_more

Source support: Explicit

  • link
    baike.baidu.comhttps://baike.baidu.com/item/TOCTOUZH · Explicit
    verified

RELATED MODELS

Related model

Segal's Law

An adage using two disagreeing watches to illustrate uncertainty from conflicting sources.

arrow_forwardRelated model

The Idea Maze

A good idea is not a momentary inspiration, but a maze map containing multiple paths, dead ends, turning points, and treasures.

arrow_forwardRelated model

Double Diamond Model

Proposed by the British Design Council.

arrow_forward