Ozone: Efficient Execution with Zero Timing Leakage for Modern Microarchitectures · HackerPapers discussions

Ozone: Efficient Execution with Zero Timing Leakage for Modern Microarchitectures — mentioned by nickpsecurity

Thu, 04 Oct 2018 21:31:29 GMT

I considered doing it just to run security-critical apps on CPU's like CHERI that I couldn't get in ASIC form: https://www.cl.cam.ac.uk/research/security/ctsrd/cheri/ Slow, $2000-a-unit hardware might be worth it if it makes your OS close to unhackable. I'd just have to make sure apps are lean and efficient. I already favor those, though. :) Also, there's been work in "instruction set randomization" that obfuscates the CPU itself to reduce odds malware will work. Mostly widely-deployed, non-custom attacks but might stop some custom attackers, too.…

Paper and discussion history. A mention is not an endorsement.

Ozone: Efficient Execution with Zero Timing Leakage for Modern Microarchitectures — mentioned by nickpsecurity

Wed, 18 Jul 2018 13:53:39 GMT

Interesting. I'm mostly not tracking these since there is a ton of CompSci work post-Meltdown/Spectre. I do periodically look for things that try to stop many attacks at once. Here's two I found that were interesting with one in hardware and one for clouds on top of a verified hypervisor: https://arxiv.org/pdf/1703.07706.pdf https://pdfs.semanticscholar.org/6aa3/18e95cae5a932e330857e5...

Paper and discussion history. A mention is not an endorsement.

Ozone: Efficient Execution with Zero Timing Leakage for Modern Microarchitectures — mentioned by nickpsecurity

Sun, 15 Jul 2018 22:41:46 GMT

Language-based Information Flow Security (2003) http://www.cs.cornell.edu/andru/papers/jsac/sm-jsac03.pdf Note: This is a great overview with plenty of terms you can use to find modern work. It's branching out in all these areas. Key words to use include "non-interference", "static analysis," "covert channels," "labels," "confidentiality," and "side channels." Securing Information Flow at Runtime (2008) http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.142.... Note: Example of the language work they do to lay down foundations. Static, Info-Flow Analysis That Handles Implicit Flows…

Paper and discussion history. A mention is not an endorsement.