Matches in SemOpenAlex for { <https://semopenalex.org/work/W289392197> ?p ?o ?g. }
- W289392197 abstract "The problem of controlling information flow in multithreaded programs remains an important open challenge.A major difficulty for tracking information flow in concurrent programs is due to the internal timing covert channel. Information is leaked via this channel when secrets affect the timing behavior of a thread, which, via the scheduler, affects the interleaving of public events. This channel is particularly dangerous because,in contrast to external timing, the attacker does not need to observe the actual executiontime of programs.This thesis introduces a novel treatment of the interaction between threads and the scheduler. As a result, a permissive security specification and a compositional security type system are obtained. The type system guarantees security for a wide class of schedulersand provides a flexible treatment of dynamic thread creation and synchronization.The approach relies on the modification of the scheduler in the run-time environment.In some scenarios, the modification of the run-time environment might not be an acceptable requirement. For such scenarios, the thesis presents two transformations thateliminate the need for modifying the scheduler while avoiding internal timing leaks. The first transformation is given for programs running under cooperative schedulers. It states that threads must not yield control inside of computations that branch on secrets. The second transformation closes internal timing channel when the scheduler is preemptive and behaves as round-robin. It spawns dedicated threads, whenever computation mayaffect secrets, and carefully synchronizes them.This dissertation also presents two libraries for information-flowsecurity in Haskell.The first proposed library supports multithreaded code and evaluates the implementations of some of the ideas described above to avoid internal timing leaks. This implementation includes an online-shopping case study. The case study reveals that exploitingconcurrency to leak secrets is feasible and dangerous in practice and shows how the library can help avoiding internal timing leaks. Up to the publication date, this is the first tool that provides information-flow security in multithreaded programs and the first implementationof a case study that involves concurrency and information-flow policies.The second library, in constrast, is designed for sequential programs and includes a novel treatment for inteded release of information (declassification)." @default.
- W289392197 created "2016-06-24" @default.
- W289392197 creator A5028178671 @default.
- W289392197 date "2008-01-01" @default.
- W289392197 modified "2023-09-22" @default.
- W289392197 title "Language Support for Controlling Timing-Based Covert Channels" @default.
- W289392197 cites W1510418153 @default.
- W289392197 cites W1511116625 @default.
- W289392197 cites W1511668635 @default.
- W289392197 cites W1519156167 @default.
- W289392197 cites W1520671672 @default.
- W289392197 cites W1540161478 @default.
- W289392197 cites W1548432452 @default.
- W289392197 cites W1572388405 @default.
- W289392197 cites W1614902435 @default.
- W289392197 cites W1789713128 @default.
- W289392197 cites W1819958245 @default.
- W289392197 cites W1973336874 @default.
- W289392197 cites W1977764760 @default.
- W289392197 cites W1997775274 @default.
- W289392197 cites W2018501701 @default.
- W289392197 cites W2023931614 @default.
- W289392197 cites W2064138295 @default.
- W289392197 cites W2072885133 @default.
- W289392197 cites W2080914957 @default.
- W289392197 cites W2094873755 @default.
- W289392197 cites W2102870251 @default.
- W289392197 cites W2105443119 @default.
- W289392197 cites W2110263582 @default.
- W289392197 cites W2120350928 @default.
- W289392197 cites W2121988324 @default.
- W289392197 cites W2123858370 @default.
- W289392197 cites W2136296832 @default.
- W289392197 cites W2141126977 @default.
- W289392197 cites W2141248338 @default.
- W289392197 cites W2148592296 @default.
- W289392197 cites W2154564703 @default.
- W289392197 cites W2162022335 @default.
- W289392197 cites W2168197734 @default.
- W289392197 cites W2168686464 @default.
- W289392197 cites W2168753065 @default.
- W289392197 cites W2202040224 @default.
- W289392197 cites W2993383518 @default.
- W289392197 cites W3118130 @default.
- W289392197 hasPublicationYear "2008" @default.
- W289392197 type Work @default.
- W289392197 sameAs 289392197 @default.
- W289392197 citedByCount "2" @default.
- W289392197 countsByYear W2893921972012 @default.
- W289392197 countsByYear W2893921972019 @default.
- W289392197 crossrefType "dissertation" @default.
- W289392197 hasAuthorship W289392197A5028178671 @default.
- W289392197 hasConcept C103377522 @default.
- W289392197 hasConcept C111919701 @default.
- W289392197 hasConcept C120314980 @default.
- W289392197 hasConcept C127413603 @default.
- W289392197 hasConcept C138101251 @default.
- W289392197 hasConcept C160191386 @default.
- W289392197 hasConcept C169590947 @default.
- W289392197 hasConcept C184842701 @default.
- W289392197 hasConcept C199360897 @default.
- W289392197 hasConcept C206729178 @default.
- W289392197 hasConcept C206952183 @default.
- W289392197 hasConcept C21547014 @default.
- W289392197 hasConcept C28034677 @default.
- W289392197 hasConcept C29024540 @default.
- W289392197 hasConcept C41008148 @default.
- W289392197 hasConcept C79974875 @default.
- W289392197 hasConceptScore W289392197C103377522 @default.
- W289392197 hasConceptScore W289392197C111919701 @default.
- W289392197 hasConceptScore W289392197C120314980 @default.
- W289392197 hasConceptScore W289392197C127413603 @default.
- W289392197 hasConceptScore W289392197C138101251 @default.
- W289392197 hasConceptScore W289392197C160191386 @default.
- W289392197 hasConceptScore W289392197C169590947 @default.
- W289392197 hasConceptScore W289392197C184842701 @default.
- W289392197 hasConceptScore W289392197C199360897 @default.
- W289392197 hasConceptScore W289392197C206729178 @default.
- W289392197 hasConceptScore W289392197C206952183 @default.
- W289392197 hasConceptScore W289392197C21547014 @default.
- W289392197 hasConceptScore W289392197C28034677 @default.
- W289392197 hasConceptScore W289392197C29024540 @default.
- W289392197 hasConceptScore W289392197C41008148 @default.
- W289392197 hasConceptScore W289392197C79974875 @default.
- W289392197 hasLocation W2893921971 @default.
- W289392197 hasOpenAccess W289392197 @default.
- W289392197 hasPrimaryLocation W2893921971 @default.
- W289392197 hasRelatedWork W143775895 @default.
- W289392197 hasRelatedWork W1456833637 @default.
- W289392197 hasRelatedWork W1502665852 @default.
- W289392197 hasRelatedWork W1778175466 @default.
- W289392197 hasRelatedWork W1998104598 @default.
- W289392197 hasRelatedWork W2023889124 @default.
- W289392197 hasRelatedWork W2067271139 @default.
- W289392197 hasRelatedWork W2105482313 @default.
- W289392197 hasRelatedWork W2396063901 @default.
- W289392197 hasRelatedWork W2754021180 @default.
- W289392197 hasRelatedWork W2765559623 @default.
- W289392197 hasRelatedWork W2802323239 @default.
- W289392197 hasRelatedWork W28319167 @default.