TaskShuffler: A Schedule Randomization Protocol for Obfuscation against Timing Inference Attacks in Real-Time Systems

2016 IEEE Real-Time and Embedded Technology and Applications Symposium, RTAS 2016 - Proceedings

Volumn , Issue , 2016, Pages

  Yoon, Man Ki ^a   Mohan, Sibin ^b   Chen, Chien Ying ^a   Sha, Lui ^a  

^a University of Illinois at Urbana Champaign   (United States)

^b UNIVERSITY OF ILLINOIS AT URBANA CHAMPAIGN   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

INTERACTIVE COMPUTER SYSTEMS; SIDE CHANNEL ATTACK;

COVERT CHANNELS; INFERENCE ATTACKS; REAL TIME GUARANTEES; SAFE OPERATION; SIDE-CHANNEL;

REAL TIME SYSTEMS;

EID: 84971222629     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/RTAS.2016.7461362     Document Type: Conference Paper

References (31)

1. Jeep Hacking 101. IEEE Spectrum, Aug 2015. http://spectrum.ieee.org/ cars-that-think/transportation/systems/jeep-hacking-101.
2. N. Audsley, A. Burns, M. Richardson, K. Tindell, and A. J. Wellings. Applying new scheduling theory to static priority pre-emptive scheduling. Software Engineering Journal, 8:284-292, 1993.
3. C. Cachin. Entropy Measures and Unconditional Security in Cryptography. PhD thesis, ETH Zurich, 1997. Hartung-Gorre Verlag, Konstanz.
4. H. Chan, A. Perrig, and D. Song. Random key predistribution schemes for sensor networks. In Proc. of the IEEE Symposium on Security and Privacy, 2003.
5. C.-Y. Chen, S. Mohan, and R. Bobba. Schedule-based side-channel attack in fixed-priority real-time systems. Technical report, University of Illinois at Urbana Champaign, 2015. http://hdl.handle.net/2142/88344.
6. S. Crane, C. Liebchen, A. Homescu, L. Davi, P. Larsen, A.-R. Sadeghi, S. Brunthaler, and M. Franz. Readactor: Practical code randomization resilient to memory disclosure. In Proc. of the IEEE Symposium on Security and Privacy, 2015.
7. L. V. Davi, A. Dmitrienko, S. Nürnberger, and A.-R. Sadeghi. Gadge me if you can: Secure and efficient ad-hoc instruction-level randomization for x86 and arm. In Proc. of the ACM SIGSAC symposium on Information, computer and communications security, 2013.
8. Y. Dodis and A. Smith. Entropic security and the encryption of high entropy messages. In Proc. of the International Conference on Theory of Cryptography, 2005.
9. P. C. Kocher. Timing attacks on implementations of diffie-hellman, RSA, DSS, and other systems. In Proc. of the Annual International Cryptology Conference, volume 1109 of Lecture Notes in Computer Science. Springer, 1996.
10. K. Koscher, A. Czeskis, F. Roesner, S. Patel, T. Kohno, S. Checkoway, D. McCoy, B. Kantor, D. Anderson, H. Shacham, and S. Savage. Experimental security analysis of a modern automobile. In Proc. of the IEEE Symposium on Security and Privacy, 2010.
11. J. Lehoczky. Fixed priority scheduling of periodic task sets with arbitrary deadlines. In Proc. of the IEEE Real-Time Systems Symposium, 1990.
12. C. L. Liu and J. W. Layland. Scheduling algorithms for multiprogramming in a hard real-time environment. Journal of the ACM, 20(1):46-61, 1973.
13. F. Liu, Y. Yarom, Q. Ge, G. Heiser, and R. Lee. Last-level cache side-channel attacks are practical. In Proc. of the IEEE Symposium on Security and Privacy, 2015.
14. S. Mohan, S. Bak, E. Betti, H. Yun, L. Sha, and M. Caccamo. S3A: Secure system simplex architecture for enhanced security and robustness of cyber-physical systems. In Proc. of the ACM Conference on High Confidence Networked Systems, 2013.
15. S. Mohan, M.-K. Yoon, R. Pellizzoni, and R. Bobba. Real-time systems security through scheduler constraints. In Proc. of the Euromicro Conference on Real-Time Systems, 2014.
16. D. A. Osvik, A. Shamir, and E. Tromer. Cache attacks and countermeasures: The case of aes. In Proc. of the Cryptographers' Track at the RSA Conference on Topics in Cryptology, 2006.
17. R. Pellizzoni, N. Paryab, M.-K. Yoon, S. Bak, S. Mohan, and R. Bobba. A generalized model for preventing information leakage in hard realtime systems. In Proc. of the IEEE Real-Time Embedded Technology and Applications Symposium, 2015.
18. R. Rajkumar, L. Sha, and J. Lehoczky. Real-time synchronization protocols for multiprocessors. In Proc. of the IEEE Real-Time Systems Symposium, 1988.
19. L. Sha, R. Rajkumar, and J. P. Lehoczky. Priority inheritance protocols: An approach to real-time synchronization. IEEE Trans. Comput., 39(9):1175-1185, Sept. 1990.
20. C. Shannon. A mathematical theory of communication. Bell System Technical Journal, The, 27(3):379-423, July 1948.
21. D. Shepard, J. Bhatti, and T. Humphreys. Drone hack: Spoofing attack demonstration on a civilian unmanned aerial vehicle. GPS World, August 2012.
22. J. Son and J. Alves-Foss. Covert timing channel analysis of rate monotonic real-time scheduling algorithm in mls systems. In Proc. of the IEEE Information Assurance Workshop, 2006.
23. H. Teso. Aicraft hacking. In Proc. of the Fourth Annual HITB Security Conference in Europe, 2013.
24. M. Völp, B. Engel, C.-J. Hamann, and H. Härtig. On confidentiality preserving real-time locking protocols. In Proc. of the IEEE Real-Time Embedded Technology and Applications Symposium, 2013.
25. M. Völp, C.-J. Hamann, and H. Härtig. Avoiding timing channels in fixed-priority schedulers. In Proc. of the ACM Symposium on Information, Computer and Communication Security, 2008.
26. M.-K. Yoon, S. Mohan, J. Choi, M. Christodorescu, and L. Sha. Learning execution contexts from system call distribution for intrusion detection in embedded system. 2015. http://arxiv.org/abs/1501.05963.
27. M.-K. Yoon, S. Mohan, J. Choi, J.-E. Kim, and L. Sha. SecureCore: A multicore-based intrusion detection architecture for real-time embedded systems. In Proc. of the IEEE Real-Time Embedded Technology and Applications Symposium, 2013.
28. M.-K. Yoon, S. Mohan, J. Choi, and L. Sha. Memory Heat Map: Anomaly detection in real-time embedded systems using memory behavior. In Proc. of the ACM/EDAC/IEEE Design Automation Conference, 2015.
29. M. M. Z. Zadeh, M. Salem, N. Kumar, G. Cutulenco, and S. Fischmeister. SiPTA: Signal processing for trace-based anomaly detection. In Proc. of the International Conference on Embedded Software, 2014.
30. T. Zhang and R. B. Lee. New models of cache architectures characterizing information leakage from cache side channels. In Proc. of the Annual Computer Security Applications Conference, 2014.
31. C. Zimmer, B. Bhatt, F. Mueller, and S. Mohan. Time-based intrusion detection in cyber-physical systems. In Proc. of the International Conference on Cyber-Physical Systems, 2010.