Memory trace oblivious program execution

Proceedings of the Computer Security Foundations Workshop

Volumn , Issue , 2013, Pages 51-65

  Liu, Chang ^a   Hicks, Michael ^a   Shi, Elaine ^a  

^a UNIVERSITY OF MARYLAND   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CLOUD SERVICE PROVIDERS; COMPUTING INFRASTRUCTURES; COMPUTING PLATFORM; HARDWARE SUPPORTS; MEMORY ENCRYPTION; OPTIMAL EFFICIENCY; PROGRAM EXECUTION; SENSITIVE INFORMATIONS;

COMPUTER ARCHITECTURE; RANDOM ACCESS STORAGE; SECURITY OF DATA; SECURITY SYSTEMS; SYSTEM BUSES;

PROGRAM COMPILERS;

EID: 84885008414     PISSN: 10636900     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSF.2013.11     Document Type: Conference Paper

References (50)

1. Johan Agat. Transforming out timing leaks. In 27th ACM Symposium On Principles OF Programming Languages (POPL), pages 40-53, 2000.
2. Aslan Askarov, Sebastian Hunt, Andrei Sabelfeld, and David Sands. Termination-insensitive noninterference leaks more than just a bit. In Proceedings of the 13th European Symposium on Research in Computer Security: Computer Security, ESORICS '08, pages 333-348, Berlin, Heidelberg, 2008. Springer-Verlag.
3. Aslan Askarov, Danfeng Zhang, and Andrew C. Myers. Predictive black-box mitigation of timing channels. In ACM Conference on Computer and Communications Security, pages 297-307, 2010.
4. Gilles Barthe, Tamara Rezk, and Martijn Warnier. Preventing timing leaks through transactional branching instructions. Electron. Notes Theor. Comput. Sci., 153(2):33-55, May 2006.
5. Michael R. Clarkson, Stephen Chong, and Andrew C. Myers. Civitas: Toward a secure voting system. In IEEE Symposium on Security and Privacy (Oakland), 2008.
6. HMC Consortium. Hybrid memory cube. http://hybridmemorycube. org/.
7. Bart Coppens, Ingrid Verbauwhede, Koen De Bosschere, and Bjorn De Sutter. Practical mitigations for timing-based side-channel attacks on modern x86 processors. In Proceedings of the 2009 30th IEEE Symposium on Security and Privacy, SP '09, pages 45-60, Washington, DC, USA, 2009. IEEE Computer Society.
8. Thomas H. Cormen, Charles E. Leiserson, Ronald L. Rivest, and Clifford Stein. Introduction To Algorithms, Third Edition. MIT Press, 2009.
9. Zhenyue Deng and Geoffrey Smith. Lenient array operations for practical secure information flow. In Proceedings of the 17th Computer Security Foundations Workshop, pages 115-124. IEEE, June 2004.
10. Dominique Devriese and Frank Piessens. Noninterference through secure multi-execution. In Proceedings of the 2010 IEEE Symposium on Security and Privacy, pages 109-124, 2010.
11. David Eppstein, Michael T. Goodrich, and Roberto Tamassia. Privacy-preserving data-oblivious geometric algorithms for geographic data. In GIS, pages 13-22, 2010.
12. Christopher W. Fletcher, Marten van Dijk, and Srinivas Devadas. A secure processor architecture for encrypted computation on untrusted programs. In Proceedings of the seventh ACM workshop on Scalable trusted computing, STC '12, pages 3-8. ACM, 2012.
13. Jeffrey S. Foster, Robert Johnson, John Kodumal, and Alex Aiken. Flow-Insensitive Type Qualifiers. ACM Transactions of Programming Languages and Systems (TOPLAS), 28(6):1035-1087, November 2006.
14. M. Garey and D. Johnson. Computers and Intractability: A Guide to the Theory of NP-Completeness. W. H. Freeman, 1979.
15. Daniel B. Giffin, Amit Levy, Deian Stefan, David Terei, David Mazières, John C. Mitchell, and Alejandro Russo. Hails: protecting data privacy in untrusted web applications. In Proceedings of the 10th USENIX conference on Operating Systems Design and Implementation, OSDI'12, pages 47-60, Berkeley, CA, USA, 2012. USENIX Association.
16. O. Goldreich. Towards a theory of software protection and simulation by oblivious RAMs. In ACM Symposium on Theory of Computing (STOC), 1987.
17. Oded Goldreich and Rafail Ostrovsky. Software protection and simulation on oblivious RAMs. J. ACM, 1996.
18. Michael T. Goodrich and Michael Mitzenmacher. Privacy-preserving access of outsourced data via oblivious RAM simulation. In International Colloquium on Automata, Languages and Programming (ICALP), pages 576-587, 2011.
19. Michael T. Goodrich, Michael Mitzenmacher, Olga Ohrimenko, and Roberto Tamassia. Privacy-preserving group data access via stateless oblivious RAM simulation. In ACM-SIAM Symposium on Discrete Algorithms (SODA), 2012.
20. Michael T. Goodrich, Olga Ohrimenko, and Roberto Tamassia. Data-oblivious graph drawing model and algorithms. CoRR, abs/1209. 0756, 2012.
21. J. Alex Halderman, Seth D. Schoen, Nadia Heninger, William Clarkson, William Paul, Joseph A. Calandrino, Ariel J. Feldman, Jacob Appelbaum, and Edward W. Felten. Lest we remember: cold-boot attacks on encryption keys. Commun. ACM, 52(5):91-98, 2009.
22. Daniel Hedin and David Sands. Timing aware in-formation flow security for a javacard-like bytecode. Electron. Notes Theor. Comput. Sci., 141(1):163-182, December 2005.
23. Adam Holt, Keith Weiss, Katy Huberty, Ehud Gelblum, Simon Flannery, Sanjay Devgan, Atif Malik, Nathan Rozof, Adam Wood, Patrick Standaert, Francois Meunier, Jasmine Lu, Grace Chen, Bill Lu, Keon Han, Vipin Khare, and Masaharu Miyachi. Cloud computing takes off, market set to boom as migration accelerates. Morgan Stanley Blue Paper, http://www. morganstanley. com/views/perspectives/ cloud computing. pdf, 2011.
24. Safety joins performance: Infineon introduces automotive multicore 32-bit microcontroller family aurix-tm to meet safety and powertrain requirements of upcoming vehicle generations. http://www. infineon. com/cms/en/corporate/press/ news/ releases/2012/INFATV201205-040. html.
25. Jif: Java + information flow. http://www. cs. cornell. edu/ jif/.
26. Vineeth Kashyap, Ben Wiedermann, and Ben Hardekopf. Timing-and termination-sensitive secure information flow: Exploring a new approach. In Proceedings of the 2011 IEEE Symposium on Security and Privacy, pages 413-428, 2011.
27. Eyal Kushilevitz, Steve Lu, and Rafail Ostrovsky. On the (in)security of hash-based oblivious RAM and a new balancing scheme. In ACM-SIAM Symposium on Discrete Algorithms (SODA), 2012.
28. Chang Liu, Michael Hicks, and Elaine Shi. Memory trace oblivious program execution. Technical Report CS-TR-5020, University of Maryland Department of Computer Science, 2013. http://www. cs. umd. edu/ mwh/papers/pl-oram-tr. pdf.
29. Martin Maas, Eric Love, Emil Stefanov, Mohit Tiwari, Elaine Shi, John Kubiatowicz, Krste Asanovic, Ch. Papamanthou, and Dawn Song. Practical, on-demand oblivious computation. Manuscript in submission, 2012.
30. Jonathan M. McCune, Yanlin Li, Ning Qu, Zongwei Zhou, Anupam Datta, Virgil D. Gligor, and Adrian Perrig. Trustvisor: Efficient TCB reduction and attestation. In IEEE Symposium on Security and Privacy, 2010.
31. Bryan Parno, Jonathan M. McCune, Dan Wendlandt, David G. Andersen, and Adrian Perrig. Clamp: Practical prevention of large-scale data leaks. In Proceedings of the 2009 IEEE Symposium on Security and Privacy, May 2009.
32. François Pottier and Vincent Simonet. Information flow inference for ml. ACM Trans. Program. Lang. Syst., 25(1):117-158, January 2003.
33. Brian Rogers, Siddhartha Chhabra, Milos Prvulovic, and Yan Solihin. Using address independent seed encryption and bonsai merkle trees to make secure processors os-and performance-friendly. In Proceedings of the 40th Annual IEEE/ACM International Symposium on Microarchitecture, MICRO 40, pages 183-196, 2007.
34. Andrei Sabelfeld and Andrew C. Myers. Languagebased information-flow security. IEEE Journal on Selected Areas in Communications, 21(1):5-19, January 2003.
35. Reiner Sailer, Xiaolan Zhang, Trent Jaeger, and Leendert van Doorn. Design and implementation of a TCG-based integrity measurement architecture. In Proceedings of the 13th conference on USENIX Security Symposium-Volume 13, SSYM'04, pages 16-16, Berkeley, CA, USA, 2004. USENIX Association.
36. Elaine Shi, T.-H. Hubert Chan, Emil Stefanov, and Mingfei Li. Oblivious RAM with O((logN)3) worstcase cost. In ASIACRYPT, pages 197-214, 2011.
37. Elaine Shi, Adrian Perrig, and Leendert Van Doorn. BIND: A fine-grained attestation service for secure distributed systems. In IEEE Symposium on Security and Privacy, 2005.
38. Weidong Shi and Hsien-Hsin S. Lee. Authentication control point and its implications for secure processor design. In Proceedings of the 39th Annual IEEE/ACM International Symposium on Microarchitecture, MICRO 39, pages 103-112, Washington, DC, USA, 2006. IEEE Computer Society.
39. Weidong Shi, Hsien-Hsin S. Lee, Mrinmoy Ghosh, and Chenghuai Lu. Architectural support for high speed protection of memory integrity and confidentiality in multiprocessor systems. In Proceedings of the 13th International Conference on Parallel Architectures and Compilation Techniques, PACT '04, pages 123-134, Washington, DC, USA, 2004. IEEE Computer Society.
40. Weidong Shi, Hsien-Hsin S. Lee, Mrinmoy Ghosh, Chenghuai Lu, and Alexandra Boldyreva. High efficiency counter mode security architecture via prediction and precomputation. In Proceedings of the 32nd annual international symposium on Computer Architecture, ISCA '05, pages 14-24, Washington, DC, USA, 2005. IEEE Computer Society.
41. Sergei Skorobogatov. Low temperature data remanence in static RAM. Technical Report UCAM-CL-TR-536, University of Cambridge, Computer Laboratory, June 2002.
42. Emil Stefanov, Elaine Shi, and Dawn Song. Towards practical oblivious RAM. In Network and Distributed System Security Symposium (NDSS), 2012.
43. G. Edward Suh, Dwaine Clarke, Blaise Gassend, Marten van Dijk, and Srinivas Devadas. Aegis: architecture for tamper-evident and tamper-resistant processing. In Proceedings of the 17th annual international conference on Supercomputing, ICS '03, pages 160-171, New York, NY, USA, 2003. ACM.
44. David Lie Chandramohan Thekkath, Mark Mitchell, Patrick Lincoln, Dan Boneh, John Mitchell, and Mark Horowitz. Architectural support for copy and tamper resistant software. SIGOPS Oper. Syst. Rev., 34(5):168-177, November 2000.
45. Peter Williams and Radu Sion. Single round access privacy on outsourced storage. In CCS, 2012.
46. Peter Williams, Radu Sion, and Bogdan Carbunar. Building castles out of mud: practical access pattern privacy and correctness on untrusted storage. In Proceedings of the 15th ACM conference on Computer and communications security, CCS '08, pages 139-148, New York, NY, USA, 2008. ACM.
47. Peter Williams, Radu Sion, and Alin Tomescu. Privatefs: a parallel oblivious file system. In Proceedings of the 2012 ACM conference on Computer and communications security, CCS '12, pages 977-988, New York, NY, USA, 2012. ACM.
48. Nickolai Zeldovich, Silas Boyd-Wickizer, Eddie Kohler, and David Mazières. Making information flow explicit in histar. Commun. ACM, 54(11):93-101, 2011.
49. Danfeng Zhang, Aslan Askarov, and Andrew C. Myers. Language-based control and mitigation of timing channels. In PLDI, pages 99-110, 2012.
50. Xiaotong Zhuang, Tao Zhang, and Santosh Pande. Hide: an infrastructure for efficiently protecting information leakage on the address bus. SIGARCH Comput. Archit. News, 32(5):72-84, October 2004.