Performance aware secure code partitioning

ABSTRACT

Many embedded applications exist where decisions are made using sensitive information. A critical issue in such applications is to ensure that data is accessed only by authorized computing entities. In many scenarios, these entities do not rely on each other, yet they need to work on a secure application in parallel to complete application execution under the specified deadline. Our focus in this paper is on compiler-guided secure code partitioning among a set of hosts. The scenario targeted involves a set of hosts that want to execute a secure embedded application in parallel. The various hosts have different levels of access to the data structures manipulated in the application. Our approach partitions the application among the hosts such that the load imbalance across hosts is minimized to reduce execution time while ensuring that no security leak occurs.

REFERENCES

• 1: http://www.cs.umd.edu/jfoster/cqual/
• 2: D. E. Bell and L. J. LaPadula. Secure Computer Systems: Mathematical Foundations. MITRE Technical Report 2457, Volume 1, 1973.
• 3: David E. Culler , Anoop Gupta , Jaswinder Pal Singh, Parallel Computer Architecture: A Hardware/Software Approach, Morgan Kaufmann Publishers Inc., San Francisco, CA, 1997
• 4: Dorothy E. Denning , Peter J. Denning, Certification of programs for secure information flow, Communications of the ACM, v.20 n.7, p.504-513, July 1977 [doi>10.1145/359636.359712]
• 5: F. Douglis, J. K. Ousterhoutm, M. F. Kaashoek, and A. S. Tannenbaum. A comparison of two distributed systems: Amoeba and Sprite. ACM Transactions on Computer Systems, 4(4), Fall 1991.
• 6: Ian Foster , Nicholas T. Karonis , Carl Kesselman , Steven Tuecke, Managing security in high-performance distributed computations, Cluster Computing, v.1 n.1, p.95-107, 1998
• 7: http://www.cs.cornell.edu/jif/
• 8: Paul A. Karger, Multi-Level Security Requirements for Hypervisors, Proceedings of the 21st Annual Computer Security Applications Conference, p.267-275, December 05-09, 2005 [doi>10.1109/CSAC.2005.41]
• 9: Srivaths Ravi , Paul Kocher , Ruby Lee , Gary McGraw , Anand Raghunathan, Security as a new dimension in embedded system design, Proceedings of the 41st annual conference on Design automation, June 07-11, 2004, San Diego, CA, USA [doi>10.1145/996566.996771]
• 10: G. Kreisel and J. L. Krivine. Elements of mathematical logic. North-Holland Pub. Co., 1967.
• 11: V. Benjamin Livshits , Monica S. Lam, Tracking pointers with path and context sensitivity for bug detection in C programs, Proceedings of the 9th European software engineering conference held jointly with 11th ACM SIGSOFT international symposium on Foundations of software engineering, September 01-05, 2003, Helsinki, Finland
• 12: Peter Loscocco , Stephen Smalley, Integrating Flexible Support for Security Policies into the Linux Operating System, Proceedings of the FREENIX Track: 2001 USENIX Annual Technical Conference, p.29-42, June 25-30, 2001
• 13: S. Maret On Their Own Terms: A Lexicon with an Emphasis on Information-Related Terms Produced by the U.S. Federal Government. 2005.
• 14: Andrew C. Myers , Barbara Liskov, Protecting privacy using the decentralized label model, ACM Transactions on Software Engineering and Methodology (TOSEM), v.9 n.4, p.410-442, Oct. 2000 [doi>10.1145/363516.363526]
• 15: Peter G. Neumann , Richard J. Feiertag , Karl N. Levitt , Lawrence Robinson, Software development and proofs of multi-level security, Proceedings of the 2nd international conference on Software engineering, p.421-428, October 13-15, 1976, San Francisco, California, United States
• 16: William Pugh, Counting solutions to Presburger formulas: how and why, Proceedings of the ACM SIGPLAN 1994 conference on Programming language design and implementation, p.121-134, June 20-24, 1994, Orlando, Florida, United States
• 17: K. Thulasiraman , M. N. S. Swamy, Graphs: theory and algorithms, John Wiley & Sons, Inc., New York, NY, 1992
• 18: Steve Zdancewic , Lantian Zheng , Nathaniel Nystrom , Andrew C. Myers, Untrusted hosts and confidentiality: secure program partitioning, Proceedings of the eighteenth ACM symposium on Operating systems principles, October 21-24, 2001, Banff, Alberta, Canada
• 19: Xiangyu Zhang , Rajiv Gupta, Hiding program slices for software security, Proceedings of the international symposium on Code generation and optimization: feedback-directed and runtime optimization, March 23-26, 2003, San Francisco, California
• 20: Lantian Zheng , Stephen Chong , Andrew C. Myers , Steve Zdancewic, Using Replication and Partitioning to Build Secure Distributed Systems, Proceedings of the 2003 IEEE Symposium on Security and Privacy, p.236, May 11-14, 2003