发明名称 |
METHODS, SYSTEMS, AND COMPUTER READABLE MEDIA FOR DETECTING COVERT TIMING CHANNELS |
摘要 |
The subject matter described herein includes a mechanism called time-deterministic replay (TDR) that can reproduce the execution of a program, including its precise timing. Without TDR, reproducing the timing of an execution is difficult because there are many sources of timing variability - such as preemptions, hardware interrupts, cache effects, scheduling decisions, etc. TDR uses a combination of techniques to either mitigate or eliminate most of these sources of variability. Using a prototype implementation of TDR in a Java Virtual Machine, we show that it is possible to reproduce the timing to within 1.85% of the original execution, even on commodity hardware. Several potential applications of TDR are described herein. A study of one of the applications is described in detail: the detection of a covert timing channel. Timing channels can be used to exfiltrate information from a compromised machine; they work by subtly varying the timing of the machine's outputs, and it is this variation that can be detected with TDR. Unlike prior solutions, which generally look for a specific type of timing channel, our approach can detect a wide variety of channels with high accuracy. |
申请公布号 |
WO2016108980(A2) |
申请公布日期 |
2016.07.07 |
申请号 |
WO2015US54088 |
申请日期 |
2015.10.05 |
申请人 |
THE TRUSTEES OF THE UNIVERSITY OF PENNSYLVANIA;GEORGETOWN UNIVERSITY |
发明人 |
CHEN, ANG;XIAO, HANJUN;MOORE, WILLIAM, BRADLEY;HAEBERLEN, ANDREAS;PHAN, LINH THI, XUAN;SHERR, MICAH;ZHOU, WENCHAO |
分类号 |
G06F21/60 |
主分类号 |
G06F21/60 |
代理机构 |
|
代理人 |
|
主权项 |
|
地址 |
|