CPL - Chalmers Publication Library
| Utbildning | Forskning | Styrkeområden | Om Chalmers | In English In English Ej inloggad.

Eliminating Cache-Based Timing Attacks with Instruction-Based Scheduling

Deian Stefan ; Pablo Buiras (Institutionen för data- och informationsteknik, Programvaruteknik (Chalmers)) ; Edward Yang ; Amit Levy ; David Terei ; Alejandro Russo (Institutionen för data- och informationsteknik, Programvaruteknik (Chalmers)) ; David Mazières
18th European Symposium on Research in Computer Security (ESORICS) 2013 (0302-9743). Vol. 8134 (2013), p. 718-735.
[Konferensbidrag, refereegranskat]

Information flow control allows untrusted code to access sensitive and trustworthy information without leaking this information. However, the presence of covert channels subverts this security mechanism, allowing processes to communicate information in violation of IFC policies. In this paper, we show that concurrent deterministic IFC systems that use time-based scheduling are vulnerable to a cache-based internal timing channel. We demonstrate this vulnerability with a concrete attack on Hails, one particular IFC web framework. To eliminate this internal timing channel, we implement instruction-based scheduling, a new kind of scheduler that is indifferent to timing perturbations from underlying hardware components, such as the cache, TLB, and CPU buses. We show this scheduler is secure against cache-based internal timing attacks for applications using a single CPU. To show the feasibility of instruction-based scheduling, we have implemented a version of Hails that uses the CPU retired-instruction counters available on commodity Intel and AMD hardware. We show that instruction-based scheduling does not impose significant performance penalties. Additionally, we formally prove that our modifications to Hails’ underlying IFC system preserve non-interference in the presence of caches.

Den här publikationen ingår i följande styrkeområden:

Läs mer om Chalmers styrkeområden  

Denna post skapades 2013-07-19. Senast ändrad 2016-11-02.
CPL Pubid: 180218


Läs direkt!

Länk till annan sajt (kan kräva inloggning)