Show simple item record

dc.contributor.authorZhang, Danfeng
dc.contributor.authorWang, Yao
dc.contributor.authorSuh, G. Edward
dc.contributor.authorMyers, Andrew C.
dc.date.accessioned2014-04-10T16:07:30Z
dc.date.available2014-04-10T16:07:30Z
dc.date.issued2014-04-10
dc.identifier.urihttps://hdl.handle.net/1813/36274
dc.descriptionContent file updated by author on 15 January 2015.
dc.description.abstractTiming channels pose a real security risk, but methods are lacking for building systems without timing leaks. One reason is that low-level hardware features create timing channels; for example, caches enable probing attacks. We introduce a new hardware design language, SecVerilog, that in conjunction with software-level enforcement makes it possible to build systems in which timing channels and other leakage are verifiably controlled. SecVerilog extends Verilog with annotations that support comprehensive, precise reasoning about information flows at the hardware level. Compared to previous methods for designing secure hardware, SecVerilog offers a better tradeoff between expressiveness and run-time overhead. We demonstrate that it is expressive enough to build complex hardware designs, including a MIPS processor, with low overhead in time, space, and programmer effort. Information flow checking is mostly static, permitting hardware designs that are largely unaffected by security enforcement mechanisms. SecVerilog also tracks information at fine granularity, allowing interleaving of instructions and data at different security levels throughout the processor. SecVerilog also comes with stronger formal assurance than previous hardware design methods: we prove that it enforces noninterference, ensuring secure information flow.en_US
dc.description.sponsorshipOffice of Naval Research (N00014-13-1-0089) the MURI grant (FA9550-12-1-0400), the Air Force grant (FA8750-11-2-0025), the National Science Foundation grants (CNS-0746913, CCF-0905208, CCF-09644909), and a grant administered by the Air Force Research Laboratory.en_US
dc.language.isoen_USen_US
dc.subjecttiming channelsen_US
dc.subjectinformation flowen_US
dc.subjecthardware description languageen_US
dc.titleA Hardware Design Language for Efficient Control of Timing Channelsen_US


Files in this item

Thumbnail

This item appears in the following Collection(s)

Show simple item record

Statistics