Blogs (61) >>
Wed 18 Jul 2018 17:00 - 20:00 at Matterhorn - Poster session Chair(s): Lisa Nguyen Quang Do

Side-channels in software are an increasingly significant threat to the confidentiality of private user information, and the static detection of such vulnerabilities is a key challenge in secure software development. In this paper, we introduce a new technique for scalable detection of side-channels in software. Given a program and a cost model for a side-channel (such as time or memory usage), we decompose the control flow graph of the program into nested branch and loop components, and compositionally assign a symbolic cost expression to each component. Symbolic cost expressions provide an over-approximation of all possible observable cost values that components can generate. Queries to a satisfiability solver on the difference between possible cost values of a component allow us to detect the presence of imbalanced paths (with respect to observable cost) through the control flow graph. When combined with taint analysis that identifies conditional statements that depend on secret information, our technique answers the following question: Does there exist a pair of paths in the program’s control flow graph, differing only on branch conditions influenced by the secret, that differ in observable side-channel value by more than some given threshold? Additional optimization queries allow us to identify the minimal number of loop iterations necessary for the above to hold or the maximal cost difference between paths in the graph. We perform symbolic execution based feasibility analyses to eliminate control flow paths that are infeasible. We implemented our techniques in a prototype, and we demonstrate its favourable performance against state-of-the-art tools as well as its effectiveness and scalability on a set of sizable, realistic Java server-client and peer-to-peer applications.

Wed 18 Jul
Times are displayed in time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change

17:00 - 20:00: Poster sessionPosters at Matterhorn
Chair(s): Lisa Nguyen Quang DoPaderborn University
17:00 - 20:00
Poster
Posters
Xuan BiThe University of Hong Kong, Bruno C. d. S. OliveiraUniversity of Hong Kong, China
17:00 - 20:00
Poster
Posters
Caroline LemieuxUniversity of California, Berkeley, Rohan PadhyeUniversity of California, Berkeley, Koushik SenUniversity of California, Berkeley, Dawn Song
17:00 - 20:00
Poster
Posters
Benoît DuhouxUniversité catholique de Louvain, Belgium, Kim MensUniversité Catholique de Louvain, Belgium, Bruno Dumas
17:00 - 20:00
Poster
Posters
Jaekwon LeeUniversity of Luxembourg, Luxembourg, Dongsun KimUniversity of Luxembourg, Tegawendé F. BissyandéUniversity of Luxembourg, Luxembourg, Woosung JungSeoul National University of Education, Yves Le TraonUniversity of Luxembourg
17:00 - 20:00
Poster
Posters
Sihan Li, Farah HaririUniversity of Illinois at Urbana-Champaign, Gul AghaUniversity of Illinois at Urbana-Champaign, USA
17:00 - 20:00
Poster
Posters
Asanka SayakkaraUniversity College Dublin, Nhien-An Le-KhacUniversity College Dublin, Mark ScanlonUniversity College Dublin
17:00 - 20:00
Poster
Posters
Luc BläserHochschule für Technik Rapperswil
17:00 - 20:00
Poster
Posters
Yannis SmaragdakisUniversity of Athens, George KastrinisUniversity of Athens
17:00 - 20:00
Poster
Posters
Jiajun JiangPeking University, Yingfei XiongPeking University, Hongyu ZhangThe University of Newcastle, Qing GaoPeking University, Xiangqun ChenPeking University
17:00 - 20:00
Poster
Posters
Gianluca MezzettiAarhus University, Denmark, Anders MøllerAarhus University, Martin Toldam TorpAarhus University
17:00 - 20:00
Poster
Posters
Seung Yeob ShinSnT Centre/University of Luxembourg, Shiva NejatiSnT Centre/University of Luxembourg, Mehrdad SabetzadehSnT Centre/University of Luxembourg, Lionel BriandSnT Centre/University of Luxembourg, Frank ZimmerSES Techcom
17:00 - 20:00
Poster
Posters
Kareem KhazemUniversity College London, Earl T. Barr, Petr HosekGoogle, Inc.
17:00 - 20:00
Poster
Posters
Jan FiedorBrno University of Technology, Monika MužikovskáBrno University of Technology, Aleš SmrčkaBrno University of Technology, Ondřej VašíčekBrno University of Technology, Tomas VojnarBrno University of Technology
17:00 - 20:00
Poster
Posters
Matteo BiagiolaFondazione Bruno Kessler, Trento, Italy, Paolo TonellaFondazione Bruno Kessler, Filippo RiccaDIBRIS, University of Genova, Italy
17:00 - 20:00
Poster
Posters
Wing LamUniversity of Illinois at Urbana-Champaign, Siwakorn SrisakaokulUniversity of Illinois at Urbana-Champaign, USA, Blake BassettUniversity of Illinois at Urbana-Champaign, USA, Peyman MahdianUniversity of Illinois at Urbana-Champaign, USA, Tao Xie
17:00 - 20:00
Poster
Posters
Neville GrechUniversity of Athens, George FourtounisUniversity of Athens, Adrian FrancalanzaUniversity of Malta, Yannis SmaragdakisUniversity of Athens
17:00 - 20:00
Poster
Posters
Julien Gascon-Samson, Kumseok JungUniversity of British Columbia, Shivanshu GoyalUniversity of British Columbia, Armin Rezaiean-AselUniversity of British Columbia, Karthik PattabiramanUniversity of British Columbia
17:00 - 20:00
Poster
Posters
Fabio NiephausHasso Plattner Institute, University of Potsdam, Robert HirschfeldHPI, University of Potsdam
17:00 - 20:00
Poster
Posters
Gunel JahangirovaFondazione Bruno Kessler & University College London, David ClarkUniversity College London, Mark HarmanFacebook and University College London, Paolo TonellaFondazione Bruno Kessler
17:00 - 20:00
Poster
Posters
Chris CumminsUniversity of Edinburgh, Pavlos PetoumenosUniversity of Edinburgh, Alastair MurrayCodeplay Software, Hugh LeatherUniversity of Edinburgh
17:00 - 20:00
Poster
Posters
Arianna BlasiUniversità della Svizzera italiana (USI) and IMDEA Software Institute, Alberto GoffiUniversità della Svizzera italiana (USI), Konstantin KuznetsovSaarland University, CISPA, Alessandra GorlaIMDEA Software Institute, Michael D. ErnstUniversity of Washington, USA, Mauro PezzeUniversità della Svizzera italiana (USI) and Università degli Studi di Milano Bicocca, Sergio Delgado CastellanosIMDEA Software Institute
17:00 - 20:00
Poster
Posters
Goran PiskachevFraunhofer IEM
17:00 - 20:00
Poster
Posters
Tegan Brennan, Seemanta SahaUniversity of California Santa Barbara, Tevfik BultanUniversity of California, Santa Barbara, Corina S PasareanuNASA Ames Research Center
17:00 - 20:00
Poster
Posters
Yanlin WangUniversity of Hong Kong, Haoyuan Zhang, Bruno C. d. S. OliveiraUniversity of Hong Kong, China, Marco ServettoVictoria University of Wellington
17:00 - 20:00
Poster
Posters
17:00 - 20:00
Poster
Posters
Stefan KrügerUniversity of Paderborn, Eric BoddenHeinz Nixdorf Institut, Paderborn University and Fraunhofer IEM
17:00 - 20:00
Poster
Posters
Lina QiuUniversity of British Columbia, YINGYING WANG, Julia RubinUniversity of British Columbia
17:00 - 20:00
Poster
Posters
Yannic NollerHumboldt-Universität zu Berlin, Rody KerstenSynopsys, Inc., Corina S PasareanuNASA Ames Research Center
17:00 - 20:00
Poster
Posters
Neville GrechUniversity of Athens, George KastrinisUniversity of Athens, Yannis SmaragdakisUniversity of Athens
17:00 - 20:00
Poster
Posters
Filip KrikavaCzech Technical University, Jan VitekNortheastern University
17:00 - 20:00
Poster
Posters
Li LiMonash University, Australia, Tegawendé F. BissyandéUniversity of Luxembourg, Luxembourg, Haoyu Wang, Jacques KleinUniversity of Luxembourg, SnT
17:00 - 20:00
Poster
Posters
Davide AnconaUniversity of Genova, Francesco DagninoDIBRIS, University of Genova, Italy, Elena ZuccaUniversity of Genova
17:00 - 20:00
Poster
Posters
Andreas SchulerUniversity of Applied Sciences Upper Austria, Gabriele Anderst-KotsisJohannes Kepler University, Linz, Austria
17:00 - 20:00
Poster
Posters
Junjie ChenPeking University, Wenxiang HuPeking University, Lingming Zhang, Dan HaoPeking University, Sarfraz KhurshidUniversity of Texas at Austin, Lu ZhangPeking University
17:00 - 20:00
Poster
Posters
Pascal WeisenburgerTechnische Universität Darmstadt, Guido SalvaneschiTU Darmstadt
17:00 - 20:00
Poster
Posters
Juliana FrancoMicrosoft Research, Cambridge, Alexandros TasosImperial College London, Sophia DrossopoulouImperial College London, Tobias WrigstadUppsala University, Susan EisenbachImperial College London
17:00 - 20:00
Poster
Posters
Tianxiao Gu, Xiaoxing MaNanjing University, Chang XuNanjing University, Yanyan JiangNanjing University, Chun CaoNanjing University, Jian LuNanjing University
17:00 - 20:00
Poster
Posters
Aleksandar ProkopecOracle Labs, Fengyun LiuEPFL, Switzerland
17:00 - 20:00
Poster
Posters
Ragnar MogkTechnische Universität Darmstadt, Lars BaumgärtnerPhilipps-Universität Marburg, Guido SalvaneschiTU Darmstadt, Bernd FreislebenPhilipps-Universität Marburg, Mira MeziniTU Darmstadt
17:00 - 20:00
Poster
Posters
Dan IorgaImperial College London, UK, Alastair DonaldsonImperial College London
17:00 - 20:00
Poster
Posters
Hannes ThallerInstitute for Software Systems Engineering, Johannes Kepler University, Linz
17:00 - 20:00
Demonstration
Posters
Diego Rodríguez-BaqueroUniversidad de los Andes, Mario Linares-VásquezSystems and Computing Engineering Department , Universidad de los Andes , Bogotá, Colombia
17:00 - 20:00
Poster
Posters
Jonathan BellGeorge Mason University, Luís PinaGeorge Mason University
Media Attached
17:00 - 20:00
Poster
Posters
17:00 - 20:00
Poster
Posters
Xuan BiThe University of Hong Kong, Bruno C. d. S. OliveiraUniversity of Hong Kong, China, Tom SchrijversKU Leuven
17:00 - 20:00
Poster
Posters
Nicolás CardozoUniversidad de los Andes, Ivana DusparicTrinity College Dublin, Ireland
17:00 - 20:00
Poster
Posters
Mattia FazziniGeorgia Institute of Technology, Martin PrammerGeorgia Institute of Technology, Marcelo d'AmorimFederal University of Pernambuco, Alessandro OrsoGeorgia Tech
17:00 - 20:00
Poster
Posters
Tukaram MuskeTata Consultancy Services Ltd, Rohith TalluriTata Consultancy Services Ltd, Alexander SerebrenikEindhoven University of Technology