Communication Dans Un Congrès Année : 2025

Execution Platform Contracts

Résumé

Confidentiality is a crucial security property for many critical applications. As a response to the discovery of numerous micro-architectural side channel attacks such as Spectre, allowing an attacker to extract secret information in pernicious ways, the notion of hardware/software contracts was proposed to formalise the guarantees provided by the hardware to the software. In this paper, we propose to extend this notion to include the guarantees provided by the operating system (OS), so far unspecified in such contracts. We formalize an attacker model adapted to a typical execution model on a shared platform. More precisely, we formalize common thread and memory management policies provided by the OS on top of a hardware model and explore the consequences of potential leaks emerging on such a platform. Our investigation shows that the OS policies play a crucial role in providing security guarantees to code processing sensitive data and thus have to be taken into consideration when writing such code through platform contracts.

Fichier principal
Vignette du fichier
2025215676.pdf (210 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Licence

Dates et versions

hal-05151434 , version 1 (08-07-2025)

Licence

Identifiants

  • HAL Id : hal-05151434 , version 1

Citer

Dorian Bourgeoisat, Ulrich Kühne, Florian Brandner. Execution Platform Contracts. 28th Euromicro Conference Series on Digital System Design (DSD), Euromicro, Sep 2025, Salerno, Italy. ⟨hal-05151434⟩
12146 Consultations
476 Téléchargements

Partager

  • More