Filters

20182

Settings

Now showing1 - 2 of 2
  • Some of the metrics are blocked by your 
    consent settings
    Item type:Publication, Access status: without files ,
    A comparative study across static and dynamic side-channel countermeasures
    (Springer, 2018-11-13)
    Dantas, Yuri Gil
    ;
    Hamann, Tobias
    ;
    Mantel, Heiko 
    Timing side-channel attacks remain a major challenge for software security, in particular for cryptographic implementations. Multiple countermeasures against such attacks have been proposed over the last decades, including static and dynamic approaches. Although such countermeasures have been extensively studied in the literature, previous evaluations have mostly relied on simplified system settings. In this article, we provide a comparative evaluation of the effectiveness of both static and dynamic countermeasures in a realistic setting for Java programs. Our experimental setup considers the effects of the non-deterministic timing behavior introduced by the Java VM, in particular involving just-in-time compilation (JIT). Our empirical results indicate that such countermeasures vary heavily on how much they can reduce information leakage, and show that negative effects of non-deterministic timing behavior on their effectiveness are substantial.
    Publicationtype: Conference Paper
      17
  • Some of the metrics are blocked by your 
    consent settings
    Item type:Publication, Access status: without files ,
    An evaluation of bucketing in systems with non-deterministic timing behavior
    (Springer, 2018-08-28)
    Dantas, Yuri Gil
    ;
    Gay, Richard
    ;
    Hamann, Tobias
    ;
    Mantel, Heiko 
    ;
    Schickel, Johannes
    Timing side-channel vulnerabilities constitute a serious threat against privacy and confidentiality of data. In this article, we study the effects of bucketing, a previously proposed mitigation technique against timing side channels. We present two implementations of bucketing that reside at the application and at the kernel level, respectively. We experimentally evaluate the effectiveness of these implementations in a setting with non-deterministic timing behavior, a practically relevant setting that has not been studied before. Our results show that the impact of non-deterministic timing behavior is substantial. The bucket boundaries cannot be established sharply and this reduces the effectiveness of bucketing. Nevertheless, bucketing still provides a significant reduction of side-channel capacity.
    Publicationtype: Conference Paper
      12