Complete information flow tracking from thegGates up

International Conference on Architectural Support for Programming Languages and Operating Systems - ASPLOS

Volumn , Issue , 2009, Pages 109-120

  Tiwari, Mohit ^a   Wassel, Hassan M G ^a   Mazloom, Bita ^a   Mysore, Shashidhar ^a   Chong, Frederic T ^a   Sherwood, Timothy ^a  

^a University of California   (United States)

Author keywords

Design; Security

Indexed keywords

AUTHENTICATION; DATA TRANSFER; DESIGN; HARDWARE; PUBLIC KEY CRYPTOGRAPHY;

COMPLETE INFORMATION; CRITICAL OPERATIONS; GATE LEVEL INFORMATION FLOW TRACKING; HARDWARE IMPLEMENTATIONS; IMPOSSIBILITY RESULTS; MISSION CRITICAL TASKS; PUBLIC-KEY ENCRYPTION; SECURITY;

ARCHITECTURE;

EID: 67650085261     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1508244.1508258     Document Type: Conference Paper

References (29)

1. James Newsome and Dawn Song. Dynamic taint analysis for automatic detection, analysis, and signature generation of exploits on commodity software. In 12th Annual Network and Distributed System Security Symposium (NDSS '05), February 2005.
2. Onur Aciiçgmez. Yet another microarchitectural attack: Exploiting i-cache. In Proceedings of the 2007 ACM Workshop on Computer Security Architecture(CSAW), 2007.
3. Onur Aciiçmez, Jean pierre Seifert, and Cetin Kaya Koc. Predicting secret keys via branch prediction. In The Cryptographers' Track at the RSA Conference(CT-RSA), 2007.
4. Tiago Alves and Don Felton. TrustZone: Integrated Hardware and Software Security, July 2004. URL http://www.arm.com/ products/esd/trustzone-home.html.
5. David Brumley, James Newsome, Dawn Song, Hao Wang, and Somesh Jha. Towards automatic generation of vulnerability-based signatures. In Proceedings of the 2006 IEEE Symposium on Security and Privacy, 2006. (Pubitemid 44753708)
6. Haibo Chen, Xi Wu, Liwei Yuan, Binyu Zang, Pen chung Yew, and Frederic T. Chong. From speculation to security: Practical and efficient information flow tracking using speculative hardware. Intl. Symposium on Computer Architecture (ISCA), 2008.
7. James Clause, Wanchun Li, and Alessandro Orso. Dytan: a generic dynamic taint analysis framework. In Proceedings of the International Symposium on Software Testing and Analysis(ISSTA), 2007. (Pubitemid 47317593)
8. Manuel Costa, Jon Crowcroft, Miguel Castro, Antony Rowstron, Lidong Zhou, Lintao Zhang, and Paul Barham. Vigilante: end-to-end containment of internet worms. In Proceedings of the ACM Symposium on Operating Systems Principles(SOSP), 2005. (Pubitemid 44892209)
9. Jedidiah R. Crandall and Frederic T. Chong. Minos: Control Data Attack Prevention Orthogonal to Memory Model. In Proceedings of the 37th annual IEEE/ACM International Symposium on Microarchitecture( MICRO), 2004. (Pubitemid 40927700)
10. Joan Daemen and Vincent Rijmen. The design of rijndael: Aes - the advanced encryption standard. 2002.
11. Michael Dalton, Hari Kannan, and Christos Kozyrakis. Raksha: A Flexible Information Flow Architecture for Software Security. In 34th Intl. Symposium on Computer Architecture (ISCA), June 2007. (Pubitemid 47582126)
12. Dorothy E. Denning and Peter J. Denning. Certification of programs for secure information flow. Commun. ACM, 20(7), 1977.
13. Karine Gandolfi, Christophe Mourtel, and Francis Olivier. Electromagnetic Analysis: Concrete Results. In Cryptographic Hardware and Embedded Systems, volume 2162 of Lecture Notes in Computer Science, pages 251-261. Springer-Verlag, 2001. (Pubitemid 33329068)
14. Paul Kocher, Joshua Ja E, and Benjamin Jun. Differential power analysis. In Advances in Cryptology, pages 388-397. Springer- Verlag, 1999.
15. Paul C. Kocher. Timing attacks on implementations of die-hellman, rsa, dss, and other systems. pages 104-113. Springer-Verlag, 1996.
16. Lap Chung Lam and Tzi cker Chiueh. A general dynamic information flow tracking framework for security applications. In Proceedings of the 22nd Annual Computer Security Applications Conference on Annual Computer Security Applications Conference, 2006. (Pubitemid 351232938)
17. Ruby B. Lee, Peter C. S. Kwan, John P. Mcgregor, Jeffrey Dwoskin, and Zhenghong Wang. Architecture for protecting critical secrets in microprocessors. In Proceedings of the 32nd International Symposium on Computer Architecture (ISCA), 2005. (Pubitemid 41543426)
18. Shashidhar Mysore, Bita Mazloom, Banit Agrawal, and Timothy Sherwood. Understanding and Visualizing Full Systems with Data Flow Tomography. In Proceedings of the 13th International Conference on Architectural Support for Programming Languages and Operating Systems(ASPLOS), 2008. (Pubitemid 351585408)
19. Dag Arne Osvik, Adi Shamir, and Eran Tromer. Cache attacks and countermeasures: the case of aes. In Topics in Cryptology - CTRSA 2006, The Cryptographers Track at the RSA Conference 2006, pages 1-20. Springer-Verlag, 2006. (Pubitemid 43971699)
20. Feng Qin, Cheng Wang, Zhenmin Li, Ho seop Kim, Yuanyuan Zhou, and Youfeng Wu. LIFT: A Low-Overhead Practical Information Flow Tracking System for Detecting General Security Attacks. In Annual IEEE/ACM International Symposium on Microarchitecture, December 2006. (Pubitemid 351336992)
21. Olatunji Ruwase, Phillip B. Gibbons, Todd C. Mowry, Vijaya Ramachandran, Shimin Chen, Michael Kozuch, and Michael Ryan. Parallelizing dynamic information flow tracking. In Proceedings of the twentieth annual Symposium on Parallelism in Algorithms and Architectures(SPAA), 2008.
22. K. Shimizu, H. P. Hofstee, and J. S. Liberty. Cell broadband engine processor vault security architecture. IBM J. Res. Dev., 51(5):521- 528, 2007. ISSN 0018-8646. (Pubitemid 350031352)
23. G.E. Suh, J.W. Lee, D. Zhang, and S. Devadas. Secure Program Execution via Dynamic Information Flow Tracking. In Proceedings of the 11th international conference on Architectural Support for Programming Languages and Operating Systems(ASPLOS), 2004. (Pubitemid 40163690)
24. G.E. Suh, C.W. O'Donnell, and S. Devadas. Aegis: A single-chip secure processor. Design and Test of Computers, IEEE, 24(6):570- 580, Nov.-Dec. 2007. ISSN 0740-7475. (Pubitemid 350253575)
25. Neil Vachharajani, Matthew J. Bridges, Jonathan Chang, Ram Rangan, Guilherme Ottoni, Jason A. Blome, George A. Reis, Manish Vachharajani, and David I. August. Rifle: An architectural framework for user-centric information-flow security. In MICRO 37: Proceedings of the 37th annual IEEE/ACM International Symposium on Microarchitecture, 2004. (Pubitemid 40927702)
26. Guru Venkataramani, Ioannis Doudalis, Yan Solihin, and Milos Prvulovic. Flexitaint: A programmable accelerator for dynamic taint propagation. In Fourteenth International Symposium on High Performance Computer Architecture (HPCA), 2008.
27. Philipp Vogt, Florian Nentwich, Nenad Jovanovic, Engin Kirda, Christopher Kruegel, and Giovanni Vigna. Cross-Site Scripting Prevention with Dynamic Data Tainting and Static Analysis. In Proceeding of the Network and Distributed System Security Symposium (NDSS), San Diego, CA, February 2007.
28. Bin Xin and Xiangyu Zhang. Efficient online detection of dynamic control dependence. In ISSTA, pages 185-195, 2007. (Pubitemid 47317592)
29. Wei Xu, Sandeep Bhatkar, and R. Sekar. Taint-enhanced policy enforcement: A practical approach to defeat a wide range of attacks. In 15th USENIX Security Symposium, 2006.