An evaluation of bucketing in systems with non-deterministic timing behavior

Publikationstyp
Conference Paper
Date Issued
2018-08-28
Sprache
English
Author(s)
Dantas, Yuri Gil  
Gay, Richard  
Hamann, Tobias  
Mantel, Heiko 
Schickel, Johannes  
TORE-URI
http://hdl.handle.net/11420/13822
First published in
IFIP advances in information and communication technology  
Number in series
529
Start Page
323
End Page
338
Citation
IFIP Advances in Information and Communication Technology 529: 323-338 (2018)
Publisher DOI
10.1007/978-3-319-99828-2_23
Scopus ID
2-s2.0-85090291976
Publisher
Springer
Timing side-channel vulnerabilities constitute a serious threat against privacy and confidentiality of data. In this article, we study the effects of bucketing, a previously proposed mitigation technique against timing side channels. We present two implementations of bucketing that reside at the application and at the kernel level, respectively. We experimentally evaluate the effectiveness of these implementations in a setting with non-deterministic timing behavior, a practically relevant setting that has not been studied before. Our results show that the impact of non-deterministic timing behavior is substantial. The bucket boundaries cannot be established sharply and this reduces the effectiveness of bucketing. Nevertheless, bucketing still provides a significant reduction of side-channel capacity.
DDC Class
004: Informatik