On Building the Data-Oblivious Virtual Environment

Proceedings 2021 Learning from Authoritative Security Experiment Results Workshop Pub Date : 1900-01-01 DOI:10.14722/laser-ndss.2021.23056

Tushar M. Jois, Hyun Bin Lee, Christopher W. Fletcher, Carl A. Gunter

引用次数: 0

Abstract

software must be hardened to block a plethora of microarchitectural side channels (e.g., [11], [65], [73], [76]). Yet, existing software-based techniques to block these channels—coming from a rich line of research in data-oblivious/constant-time programming [8], [20], [51], [59]—fall short of protecting existing high-level language stacks such as R, Ruby and Python. Specifically, these techniques typically require experts to manually code core routines [8], [9], require the use of custom domain-specific languages [13], [63], or only apply to close-to-metal compiled languages [51], [59].

查看原文

微信好友朋友圈 QQ好友复制链接

本刊更多论文

构建数据无关的虚拟环境

必须对软件进行加固，以阻止过多的微架构侧通道(例如，[11]，[65]，[73]，[76])。然而，现有的基于软件的阻塞这些通道的技术——来自数据无关/恒定时间编程的丰富研究[8]，[20]，[51]，[59]——无法保护现有的高级语言堆栈，如R, Ruby和Python。具体来说，这些技术通常需要专家手动编写核心例程[8]，[9]，需要使用定制的特定于领域的语言[13]，[63]，或者只适用于接近金属的编译语言[51]，[59]。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

求助全文

约1分钟内获得全文去求助

来源期刊

Proceedings 2021 Learning from Authoritative Security Experiment Results Workshop

自引率

0.00%

发文量

期刊最新文献

On Building the Data-Oblivious Virtual Environment The Nuts and Bolts of Building FlowLens Reflections on the Experimental Evaluation of a Binary-Level Symbolic Analyzer for Spectre