PROCESSOR HARDWARE SECURITY DETECTION BY UNIQUE PROGRAM EXECUTION CHECKING â WOLFGANG KUNZ
EVENT DETAILS
Recent discovery of security attacks in advanced processors, known as Spectre and Meltdown, has resulted in high public alertness about security of hardware. The root cause of these attacks is information leakage
across covert channels that reveal secret data without any explicit information flow between the secret and the attacker. Many sources believe that such covert channels are intrinsic to highly advanced processor architectures based on speculation and out-of-order
execution, suggesting that such security risks can be avoided by staying away from high-end processors. This talk, however, presents research results which show that the problem is of wider scope: we present a new class of covert channel attacks which are
possible in average-complexity processors with in-order pipelining, as they are mainstream in applications ranging from Internet-of-Things to Autonomous Systems. We present a new approach as a foundation for remedy against covert channels: while all previous
attacks were found by clever thinking of human attackers, this talk presents a formal method called Unique Program Execution Checking which detects and locates vulnerabilities to covert channels systematically, including those to covert channels unknown so
far. A detailed report on the presented research results can be found in arXiv:1812.04975, 2018. This is joint work with Mohammad R. Fadiheh (TUK), Dominik Stoffel (TUK), Clark Barrett (Stanford), and Subhasish Mitra (Stanford).
Speaker: Wolfgang Kunz, Technische UniversitÃt Kaiserslautern (TUK), Germany
Coffee and cookies will be available.
TAGS
Add this event to your calendar:
iCalendar
Email Invite
Example papers:
 C.
Villarraga, D. Stoffel, W. Kunz. Software in a Hardware View. In: Drechsler R. (eds) Formal System Verification. Pages 123-154. ISBN 978-3-319-57685-5 Springer, Cham. 2018
 T.
Fehmel, D. Stoffel, W. Kunz: âGeneration of Abstract Driver Models for IP Integration Verificationâ, IEEE Transactions on Emerging Topics in Computing, 2018.
 M.R.
Fadiheh, S.S. Nuthakki, S. Mitra, C. Barrett, D. Stoffel, W. Kunz: âSymbolic quick error detection using symbolic initial state for pre-silicon verification.â In Design, Automation Test in Europe Conference Exhibition (DATE), 2018 (pp. 55-60).
 M.R.
Fadiheh, D. Stoffel, S. Mitra, C. Barrett, W. Kunz: âProcessor hardware security vulnerabilities and their detection by unique program execution checkingâ. Design, Automation Test in Europe Conference Exhibition (DATE), 2019. (accepted)
![[Computer Systems Lab]](http://www.cs.wisc.edu/pics/csl_logo.gif){kind=logo}