Title
Time Protection: the Missing OS Abstraction.
Abstract
Timing channels enable data leakage that threatens the security of computer systems, from cloud platforms to smartphones and browsers executing untrusted third-party code. Preventing unauthorised information flow is a core duty of the operating system, however, present OSes are unable to prevent timing channels. We argue that OSes must provide time protection, the temporal equivalent of the established memory protection, for isolating security domains. We examine the requirements of time protection, present a design and its implementation in the seL4 microkernel, and evaluate efficacy and cost on x86 and Arm processors.
Year
DOI
Venue
2018
10.1145/3302424.3303976
Proceedings of the Fourteenth EuroSys Conference 2019
Keywords
Field
DocType
confidentiality, covert channels, microkernels, seL4, security, temporal isolation, time protection, timing channels
Memory protection,x86,ARM architecture,Information flow (information theory),Computer science,Covert channel,Communication channel,Microkernel,Operating system,Distributed computing,Cloud computing
Journal
Volume
Citations 
PageRank 
abs/1810.05345
5
0.41
References 
Authors
30
4
Name
Order
Citations
PageRank
Qian Ge13159.40
Yuval Yarom277535.54
Tom Chothia344129.82
Gernot Heiser42525137.42