SPLASH 2021
Sun 17 - Fri 22 October 2021 Chicago, Illinois, United States
Wed 20 Oct 2021 14:05 - 14:20 at Zurich B - Security Chair(s): Yannis Smaragdakis
Wed 20 Oct 2021 22:05 - 22:20 at Zurich B - Security - mirror Chair(s): Chandrakana Nandi

Noninterference measurement quantifies the secret information that
might leak to an adversary from what the adversary can observe and
influence about the computation. Static and high-fidelity
noninterference measurement has been difficult to scale to complex
computations, however. This paper scales a recent framework for
noninterference measurement to the open-source RISC-V BOOM core as
specified in Verilog, through three key innovations: logically
characterizing the core's execution incrementally, applying specific
optimizations between each cycle; permitting information to be
declassified, to focus leakage measurement to only secret
information that cannot be inferred from the declassified
information; and interpreting leakage measurements for the analyst
in terms of simple rules that characterize when leakage occurs.
Case studies on cache-based side channels generally, and on specific
instances including \textsc{Spectre} attacks, show that the resulting
toolchain, called \textsc{DINoMe}, effectively scales to this modern
processor design.

Wed 20 Oct

Displayed time zone: Central Time (US & Canada) change

13:50 - 15:10
SecurityOOPSLA at Zurich B +8h
Chair(s): Yannis Smaragdakis University of Athens
13:50
15m
Talk
SpecSafe: Detecting Cache Side Channels in a Speculative WorldVirtual
OOPSLA
Robert Brotzman-Smith Pennsylvania State University, Danfeng Zhang Pennsylvania State University, Mahmut Taylan Kandemir Pennsylvania State University, Gang Tan Pennsylvania State University
DOI
14:05
15m
Talk
Interpretable Noninterference Measurement and Its Application to Processor DesignsVirtual
OOPSLA
Ziqiao Zhou Microsoft Research, Michael K. Reiter Duke University
DOI
14:20
15m
Talk
Reconciling Optimization with Secure CompilationVirtual
OOPSLA
Son Tuan Vu Sorbonne University; CNRS; LIP6, Albert Cohen Google, Arnaud de Grandmaison ARM, Christophe Guillon STMicroelectronics, Karine Heydemann Sorbonne University; CNRS; LIP6
DOI
14:35
15m
Talk
Not So Fast: Understanding and Mitigating Negative Impacts of Compiler Optimizations on Code Reuse Gadget SetsIn-Person
OOPSLA
Michael D. Brown Georgia Institute of Technology, Matthew Pruett Georgia Institute of Technology, Robert Bigelow Georgia Institute of Technology, Girish Mururu Georgia Institute of Technology, Santosh Pande Georgia Institute of Technology
DOI
14:50
20m
Live Q&A
Discussion, Questions and Answers
OOPSLA

21:50 - 23:10
Security - mirrorOOPSLA at Zurich B
Chair(s): Chandrakana Nandi Certora, inc.
21:50
15m
Talk
SpecSafe: Detecting Cache Side Channels in a Speculative WorldVirtual
OOPSLA
Robert Brotzman-Smith Pennsylvania State University, Danfeng Zhang Pennsylvania State University, Mahmut Taylan Kandemir Pennsylvania State University, Gang Tan Pennsylvania State University
DOI
22:05
15m
Talk
Interpretable Noninterference Measurement and Its Application to Processor DesignsVirtual
OOPSLA
Ziqiao Zhou Microsoft Research, Michael K. Reiter Duke University
DOI
22:20
15m
Talk
Reconciling Optimization with Secure CompilationVirtual
OOPSLA
Son Tuan Vu Sorbonne University; CNRS; LIP6, Albert Cohen Google, Arnaud de Grandmaison ARM, Christophe Guillon STMicroelectronics, Karine Heydemann Sorbonne University; CNRS; LIP6
DOI
22:35
15m
Talk
Not So Fast: Understanding and Mitigating Negative Impacts of Compiler Optimizations on Code Reuse Gadget SetsIn-Person
OOPSLA
Michael D. Brown Georgia Institute of Technology, Matthew Pruett Georgia Institute of Technology, Robert Bigelow Georgia Institute of Technology, Girish Mururu Georgia Institute of Technology, Santosh Pande Georgia Institute of Technology
DOI
22:50
20m
Live Q&A
Discussion, Questions and Answers
OOPSLA