2 Search Results for "Buttyan, Levente"

Document

Randomization as Mitigation of Directed Timing Inference Based Attacks on Time-Triggered Real-Time Systems with Task Replication

Authors: Kristin Krüger, Nils Vreman, Richard Pates, Martina Maggio, Marcus Völp, and Gerhard Fohler

Published in: LITES, Volume 7, Issue 1 (2021): Special Issue on Embedded System Security. Leibniz Transactions on Embedded Systems, Volume 7, Issue 1

Abstract

Time-triggered real-time systems achieve deterministic behavior using schedules that are constructed offline, based on scheduling constraints. Their deterministic behavior makes time-triggered systems suitable for usage in safety-critical environments, like avionics. However, this determinism also allows attackers to fine-tune attacks that can be carried out after studying the behavior of the system through side channels, targeting safety-critical victim tasks. Replication -- i.e., the execution of task variants across different cores -- is inherently able to tolerate both accidental and malicious faults (i.e. attacks) as long as these faults are independent of one another. Yet, targeted attacks on the timing behavior of tasks which utilize information gained about the system behavior violate the fault independence assumption fault tolerance is based on. This violation may give attackers the opportunity to compromise all replicas simultaneously, in particular if they can mount the attack from already compromised components. In this paper, we analyze vulnerabilities of time-triggered systems, focusing on safety-certified multicore real-time systems. We introduce two runtime mitigation strategies to withstand directed timing inference based attacks: (i) schedule randomization at slot level, and (ii) randomization within a set of offline constructed schedules. We evaluate these mitigation strategies with synthetic experiments and a real case study to show their effectiveness and practicality.

Cite as

Kristin Krüger, Nils Vreman, Richard Pates, Martina Maggio, Marcus Völp, and Gerhard Fohler. Randomization as Mitigation of Directed Timing Inference Based Attacks on Time-Triggered Real-Time Systems with Task Replication. In LITES, Volume 7, Issue 1 (2021): Special Issue on Embedded System Security. Leibniz Transactions on Embedded Systems, Volume 7, Issue 1, pp. 01:1-01:29, Schloss Dagstuhl – Leibniz-Zentrum für Informatik (2021)

Copy BibTex To Clipboard

@Article{kruger_et_al:LITES.7.1.1,
  author =	{Kr\"{u}ger, Kristin and Vreman, Nils and Pates, Richard and Maggio, Martina and V\"{o}lp, Marcus and Fohler, Gerhard},
  title =	{{Randomization as Mitigation of Directed Timing Inference Based Attacks on Time-Triggered Real-Time Systems with Task Replication}},
  journal =	{Leibniz Transactions on Embedded Systems},
  pages =	{01:1--01:29},
  ISSN =	{2199-2002},
  year =	{2021},
  volume =	{7},
  number =	{1},
  publisher =	{Schloss Dagstuhl -- Leibniz-Zentrum f{\"u}r Informatik},
  address =	{Dagstuhl, Germany},
  URL =		{https://drops.dagstuhl.de/entities/document/10.4230/LITES.7.1.1},
  URN =		{urn:nbn:de:0030-drops-192847},
  doi =		{10.4230/LITES.7.1.1},
  annote =	{Keywords: real-time systems, time-triggered systems, security}
}

Document

DOI: 10.4230/DagSemProc.10402.4

10402 Report – Working Group on Security and Privacy

Authors: Frank Kargl, Levente Buttyan, David Eckhoff, Panagiotis Papadimitratos, and Elmar Schoch

Published in: Dagstuhl Seminar Proceedings, Volume 10402, Inter-Vehicular Communication (2011)

Abstract

In the security working group, participants created an overview map of current topics in IVC security and privacy research that also includes an estimate of maturity of certain topics.

Cite as

Frank Kargl, Levente Buttyan, David Eckhoff, Panagiotis Papadimitratos, and Elmar Schoch. 10402 Report – Working Group on Security and Privacy. In Inter-Vehicular Communication. Dagstuhl Seminar Proceedings, Volume 10402, pp. 1-4, Schloss Dagstuhl – Leibniz-Zentrum für Informatik (2011)

Copy BibTex To Clipboard

@InProceedings{kargl_et_al:DagSemProc.10402.4,
  author =	{Kargl, Frank and Buttyan, Levente and Eckhoff, David and Papadimitratos, Panagiotis and Schoch, Elmar},
  title =	{{10402 Report – Working Group on Security and Privacy}},
  booktitle =	{Inter-Vehicular Communication},
  pages =	{1--4},
  series =	{Dagstuhl Seminar Proceedings (DagSemProc)},
  ISSN =	{1862-4405},
  year =	{2011},
  volume =	{10402},
  editor =	{Falko Dressler and Frank Kargl and J\"{o}rg Ott and Ozan K. Tonguz and Lars Wischhof},
  publisher =	{Schloss Dagstuhl -- Leibniz-Zentrum f{\"u}r Informatik},
  address =	{Dagstuhl, Germany},
  URL =		{https://drops.dagstuhl.de/entities/document/10.4230/DagSemProc.10402.4},
  URN =		{urn:nbn:de:0030-drops-29275},
  doi =		{10.4230/DagSemProc.10402.4},
  annote =	{Keywords: IVC, C2X, VANET, security, privacy}
}

Refine by Type
2 Document/PDF

Refine by Publication Year
1 2021
1 2011

Refine by Author
1 Buttyan, Levente
1 Eckhoff, David
1 Fohler, Gerhard
1 Kargl, Frank
1 Krüger, Kristin
Show More...

Refine by Series/Journal
1 LITES
1 DagSemProc

Refine by Classification
1 Computer systems organization → Real-time systems
1 Computer systems organization → Redundancy
1 Security and privacy → Operating systems security
1 Software and its engineering → Scheduling

Refine by Keyword
2 security
1 C2X
1 IVC
1 VANET
1 privacy
Show More...

2 Search Results for "Buttyan, Levente"

Randomization as Mitigation of Directed Timing Inference Based Attacks on Time-Triggered Real-Time Systems with Task Replication

Abstract

Cite as

10402 Report – Working Group on Security and Privacy

Abstract

Cite as

Thanks for your feedback!

Could not send message