Detection of leaks through exception mechanisms - Archive ouverte HAL
Communication Dans Un Congrès Année : 2022

Detection of leaks through exception mechanisms

Résumé

A timing attack is a security exploit that allows an attacker to discover vulnerabilities in the security of a computer or network system by analysing the execution time of algorithms. This is because each operation in a program takes time to be executed, and this time may vary depending on its inputs and the characteristics of the microprocessor on which it runs. With accurate time measurements for each operation, it may be possible for an attacker to discover secrets through the analysis of the execution time of a program. This paper presents an automatable approach for detecting information leakage in programs through timing information. It is based on the Z3-SMT solver. It allows to detect vulnerabilities in a software code according to a given security specification and target architecture. This paper also features some research issues that will be addressed during my thesis.
Fichier non déposé

Dates et versions

hal-03860083 , version 1 (18-11-2022)

Identifiants

Citer

Salim Yahia Kissi, Yassamine Seladji, Rabéa Ameur-Boulifa. Detection of leaks through exception mechanisms. 2022 International Conference on Advanced Aspects of Software Engineering (ICAASE), Sep 2022, Constantine, Algeria. pp.1-8, ⟨10.1109/ICAASE56196.2022.9931592⟩. ⟨hal-03860083⟩
53 Consultations
0 Téléchargements

Altmetric

Partager

More