Predictive mitigation of timing channels in interactive systems

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2011, Pages 563-574

  Zhang, Danfeng ^a   Askarov, Aslan ^a   Myers, Andrew C ^a  

^a Department of Computer Science and School of Operations Research and Information Engineering   (United States)

Author keywords

Information flow; Interactive systems; Mitigation; Timing channels

Indexed keywords

INFORMATION FLOWS; INTERACTIVE SYSTEM; MITIGATION; MULTIPLE CLIENTS; OUTPUT EVENTS; PUBLIC INFORMATION; TIMING CHANNELS; WEB APPLICATION;

FORECASTING; USER INTERFACES;

SECURITY OF DATA;

EID: 80755187785     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2046707.2046772     Document Type: Conference Paper

References (28)

1. B. W. Lampson, "A note on the confinement problem," Comm. of the ACM, vol. 16, no. 10, pp. 613-615, Oct. 1973.
2. P. Kocher, "Timing attacks on implementations of Diffie-Hellman, RSA, DSS, and other systems," in Advances in Cryptology - CRYPTO'96, Aug. 1996.
3. D. Brumley and D. Boneh, "Remote timing attacks are practical," Computer Networks, Jan. 2005.
4. D. Osvik, A. Shamir, and E. Tromer, "Cache attacks and countermeasures: the case of AES," Topics in Cryptology-CT-RSA 2006, Jan. 2006. [Online]. Available: http://www.springerlink.com/index/F52X1H55G1632L17. pdf
5. A. Bortz and D. Boneh, "Exposing private information by timing web applications," in Proc. 16th Int'l World-Wide Web Conf., May 2007.
6. G. Shah, A. Molina, and M. Blaze, "Keyboards and covert channels," Proc. 15th USENIX Security Symp., Aug. 2006.
7. H. Meer and M. Slaviero, "It's all about the timing⋯" in Proc. Black Hat USA, 2007.
8. Y. Liu, D. Ghosal, F. Armknecht, A. Sadeghi, and S. Schulz, "Hide and seek in time - robust covert timing channels," in ESORICS, 2009.
9. R. G. Gallagher, "Basic limits on protocol information in data communication networks," IEEE Transactions on Information Theory, vol. 22, no. 4, Jul. 1976.
10. M. Padlipsky, D. Snow, and P. Karger, "Limitations of end-to-end encryption in secure computer networks," Mitre Corp., Tech. Rep. ESD TR-78-158, 1978.
11. I. S. Moskowitz and M. H. Kang, "Covert channels - here to stay?" in COMPASS '94, 1994.
12. B. Köpf and M. Dürmuth, "A provably secure and efficient countermeasure against timing attacks," in 2009 IEEE Computer Security Foundations, Jul. 2009.
13. B. Köpf and G. Smith, "Vulnerability bounds and leakage resilience of blinded cryptography under timing attacks," in 2010 IEEE Computer Security Foundations, Jul. 2010.
14. A. Askarov, D. Zhang, and A. C. Myers, "Predictive black-box mitigation of timing channels," in ACM Conf. on Computer and Communications Security (CCS), 2010, pp. 297-307.
15. A. Sabelfeld and D. Sands, "Probabilistic noninterference for multi-threaded programs," in Proc. 13th IEEE Computer Security Foundations Workshop. IEEE Computer Society Press, Jul. 2000, pp. 200-214.
16. W.-M. Hu, "Reducing timing channels with fuzzy time," in IEEE Symposium on Security and Privacy, 1991, pp. 8 - 20.
17. J. Agat, "Transforming out timing leaks," in Proc. 27th ACM Symp. on Principles of Programming Languages (POPL), Boston, MA, Jan. 2000, pp. 40-53.
18. S. Zdancewic and A. C. Myers, "Observational determinism for concurrent program security," in Proc. 16th IEEE Computer Security Foundations Workshop, Pacific Grove, California, Jun. 2003, pp. 29-43.
19. A. Russo, J. Hughes, D. Naumann, and A. Sabelfeld, "Closing internal timing channels by transformation," in Proc. 11th Annual Asian Computing Science Conference (ASIAN), 2006.
20. J. Giles and B. Hajek, "An information-theoretic and game-theoretic study of timing channels." IEEE Transactions on Information Theory, vol. 48, no. 9, pp. 2455-2477, 2002. (Pubitemid 35032673)
21. D. E. Denning, Cryptography and Data Security. Reading, Massachusetts: Addison-Wesley, 1982.
22. J. K. Millen, "Covert channel capacity," in Proc. IEEE Symposium on Security and Privacy, Oakland, CA, Apr. 1987.
23. -, "Finite-state noiseless covert channels," in Proc. 2nd IEEE Computer Security Foundations Workshop, Jun. 1989, pp. 11-14.
24. I. S. Moskowitz and A. R. Miller, "The channel capacity of a certain noisy timing channel," IEEE Trans. on Information Theory, vol. 38, no. 4, pp. 1339-1344.
25. G. Smith, "On the foundations of quantitative information flow," Proc. 12th Intl' Conf. on Foundations of Software Science and Computation Structures, pp. 388-402, 2010.
26. M. H. Kang and I. S. Moskowitz, "A pump for rapid, reliable, secure communication," in ACM Conf. on Computer and Communications Security (CCS), Nov. 1993, pp. 119-129.
27. M. H. Kang, I. S. Moskowitz, and D. C. Lee, "A network pump," IEEE Transactions on Software Engineering, vol. 22, pp. 329-338, 1996. (Pubitemid 126771674)
28. T. Cover and J. Thomas, Elements of information theory. Wiley, 2006.