Library

eCommons

 

Safe Serializable Secure Scheduling: Transactions and the Trade-Off Between Security and Consistency (Technical Report)

Simple item page
dc.contributor.authorSheff, Isaac
dc.contributor.authorMagrino, Tom
dc.contributor.authorLiu, Jed
dc.contributor.authorMyers, Andrew C.
dc.contributor.authorvan Renesse, Robbert
dc.date.accessioned2016-08-17T04:54:36Z
dc.date.available2016-08-17T04:54:36Z
dc.date.issued2016-08-16
dc.description.abstractModern applications often operate on data in multiple administrative domains. In this federated setting, participants may not fully trust each other. These distributed applications use transactions as a core mechanism for ensuring reliability and consistency with persistent data. However, the coordination mechanisms needed for transactions can both leak confidential information and allow unauthorized influence. By implementing a simple attack, we show these side channels can be exploited. However, our focus is on preventing such attacks. We explore secure scheduling of atomic, serializable transactions in a federated setting. While we prove that no protocol can guarantee security and liveness in all settings, we establish conditions for sets of transactions that can safely complete under secure scheduling. Based on these conditions, we introduce staged commit, a secure scheduling protocol for federated transactions. This protocol avoids insecure information channels by dividing transactions into distinct stages. We implement a compiler that statically checks code to ensure it meets our conditions, and a system that schedules these transactions using the staged commit protocol. Experiments on this implementation demonstrate that realistic federated transactions can be scheduled securely, atomically, and efficiently.en_US
dc.description.sponsorshipThis work was supported by MURI grant FA9550-12-1-0400, by NSF grants 1513797, 1422544, 1601879, by gifts from Infosys and Google, and by the Department of Defense (DoD) through the National Defense Science & Engineering Graduate Fellowship (NDSEG) Program.en_US
dc.identifier.urihttps://hdl.handle.net/1813/44581
dc.language.isoen_USen_US
dc.relation.hasversionThis is a technical report associated with a paper of the same name appearing in the Proceedings of the 2016 ACM Conference on Computing and Communication Security.en_US
dc.rightsAttribution-NonCommercial-NoDerivatives 4.0 International*
dc.rights.urihttps://creativecommons.org/licenses/by-nc-nd/4.0/*
dc.subjectsecurityen_US
dc.subjecttransactionsen_US
dc.subjectinformation flowen_US
dc.subjectdistributed systemsen_US
dc.titleSafe Serializable Secure Scheduling: Transactions and the Trade-Off Between Security and Consistency (Technical Report)en_US
dc.typearticleen_US

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
tr.pdf
Size:
4.3 MB
Format:
Adobe Portable Document Format
Description:
PDF version of the report
Download

Collections

Computing and Information Science Technical Reports