Predictive mitigation of timing channels in interactive systems

Danfeng Zhang, Aslan Askarov, Andrew C. Myers

Research output: Chapter in Book/Report/Conference proceedingConference contribution

68 Scopus citations

Abstract

Timing channels remain a difficult and important problem for information security. Recent work introduced predictive mitigation, a new way to mitigating leakage through timing channels; this mechanism works by predicting timing from past behavior, and then enforcing the predictions. This paper generalizes predictive mitigation to a larger and important class of systems: systems that receive input requests from multiple clients and deliver responses. The new insight is that timing predictions may be a function of any public information, rather than being a function simply of output events. Based on this insight, a more general mechanism and theory of predictive mitigation becomes possible. The result is that bounds on timing leakage can be tightened, achieving asymptotically logarithmic leakage under reasonable assumptions. By applying it to web applications, the generalized predictive mitigation mechanism is shown to be effective in practice.

Original languageEnglish (US)
Title of host publicationCCS'11 - Proceedings of the 18th ACM Conference on Computer and Communications Security
Pages563-574
Number of pages12
DOIs
StatePublished - Nov 14 2011
Event18th ACM Conference on Computer and Communications Security, CCS'11 - Chicago, IL, United States
Duration: Oct 17 2011Oct 21 2011

Publication series

NameProceedings of the ACM Conference on Computer and Communications Security
ISSN (Print)1543-7221

Other

Other18th ACM Conference on Computer and Communications Security, CCS'11
CountryUnited States
CityChicago, IL
Period10/17/1110/21/11

All Science Journal Classification (ASJC) codes

  • Software
  • Computer Networks and Communications

Fingerprint Dive into the research topics of 'Predictive mitigation of timing channels in interactive systems'. Together they form a unique fingerprint.

  • Cite this

    Zhang, D., Askarov, A., & Myers, A. C. (2011). Predictive mitigation of timing channels in interactive systems. In CCS'11 - Proceedings of the 18th ACM Conference on Computer and Communications Security (pp. 563-574). (Proceedings of the ACM Conference on Computer and Communications Security). https://doi.org/10.1145/2046707.2046772