Browse ORBilu by Open Access
- What it is and what it isn't
- Green Road / Gold Road?
- Ready to Publish. Now What?
- How can I support the OA movement?
- Where can I learn more?
ORBilu is a project developed by
   Avoiding Leakage and Synchronization Attacks through Enclave-Side Preemption ControlVolp, Marcus  ; ; Decouchant, Jérémie et alScientific Conference (2016, December 12) Intel SGX is the latest processor architecture promising secure code execution despite large, complex and hence potentially vulnerable legacy operating systems (OSs). However, two recent works identified ... [more ▼] Intel SGX is the latest processor architecture promising secure code execution despite large, complex and hence potentially vulnerable legacy operating systems (OSs). However, two recent works identified vulnerabilities that allow an untrusted management OS to extract secret information from Intel SGX's enclaves, and to violate their integrity by exploiting concurrency bugs. In this work, we re-investigate delayed preemption (DP) in the context of Intel SGX. DP is a mechanism originally proposed for L4-family microkernels as disable-interrupt replacement. Recapitulating earlier results on language-based information-flow security, we illustrate the construction of leakage-free code for enclaves. However, as long as adversaries have fine-grained control over preemption timing, these solutions are impractical from a performance/complexity perspective. To overcome this, we resort to delayed preemption, and sketch a software implementation for hypervisors providing enclaves as well as a hardware extension for systems like SGX. Finally, we illustrate how static analyses for SGX may be extended to check confidentiality of preemption-delaying programs. [less ▲] Detailed reference viewed: 362 (29 UL)Towards Safe and Secure Autonomous and Cooperative Vehicle EcosystemsCaldeira Lima, Antonio ; Rocha, Francisco ; Volp, Marcus et alin Proceedings of the Second ACM Workshop on Cyber-Physical Systems Security and PrivaCy (2016, October) Semi-autonomous driver assists are already widely deployed and fully autonomous cars are progressively leaving the realm of laboratories. This evolution coexists with a progressive connectivity and ... [more ▼] Semi-autonomous driver assists are already widely deployed and fully autonomous cars are progressively leaving the realm of laboratories. This evolution coexists with a progressive connectivity and cooperation, creating important safety and security challenges, the latter ranging from casual hackers to highly-skilled attackers, requiring a holistic analysis, under the perspective of fully-fledged ecosystems of autonomous and cooperative vehicles. This position paper attempts at contributing to a better understanding of the global threat plane and the specific threat vectors designers should be at- tentive to. We survey paradigms and mechanisms that may be used to overcome or at least mitigate the potential risks that may arise through the several threat vectors analyzed. [less ▲] Detailed reference viewed: 674 (100 UL)Insider Threat: Memory Confidentiality and Integrity in the CloudRocha, Francisco Book published by LAP Lambert Academic Publishing (2015) Detailed reference viewed: 76 (7 UL)Defense-in-Depth Against Malicious Insiders in the CloudRocha, Francisco ; ; in IEEE International Conference on Cloud Engineering (IC2E) (2013) Detailed reference viewed: 123 (0 UL)The Next Frontier: Managing Confidentiality and Integrity of Data in the CloudRocha, Francisco ; ; Book published by IEEE Computer Society Press (2013) Detailed reference viewed: 53 (0 UL)Lucy in the Sky Without Diamonds: Stealing Confidential Data in the CloudRocha, Francisco ; in Proceedings of the 2011 IEEE/IFIP 41st International Conference on Dependable Systems and Networks Workshops (2011) Detailed reference viewed: 208 (5 UL)The Final Frontier: Confidentiality and Privacy in the CloudRocha, Francisco ; ; in Computer (2011), 44(9), 44-50 Detailed reference viewed: 121 (1 UL)Performance evaluation of DTSN in wireless sensor networksRocha, Francisco ; ; et alin Wireless Systems and Mobility in Next Generation Internet (2008) Detailed reference viewed: 81 (0 UL)End-to-end reliability in wireless sensor networks: Survey and research challenges; ; Rocha, Francisco et alin EuroFGI Workshop on IP QoS and Traffic Control (2007), 54 Detailed reference viewed: 44 (0 UL) |
||
