UTCS Colloquia - Vineeth Kashyap/University of California, Santa Barbara, "Exploring a New Approach to Timing- and Termination-Sensitive Secure Information Flow", ACES 3.408

Contact Name: 
Jenna Whitney
Date: 
Jan 28, 2011 11:00am - 12:00pm

There is a sign-up schedule for this event that can be found at

http://www.cs.utexas.edu/department/webevent/utcs/events/cgi/list_event

s.cgi

Type of Talk: Colloquia

Speaker/Affiliation: Vineeth Kashya

p/University of California, Santa Barbara

Date/Time: Friday, January
28, 2011, 11:00 a.m.

Location: ACES 3.408

Host: Calvin Lin

Talk Title: "Exploring a New Approach to Timing- and Termination-Sensitiv

e Secure Information Flow"

Talk Abstract:
Secure information flow gu

arantees the secrecy and integrity of data, preventing an attacker from le

arning secret information (secrecy) or injecting untrusted information (int

egrity). Covert channels can be used to subvert these security guarantees;
for example, timing and termination channels can, either intentionally o

r inadvertently, violate these guarantees by modifying the timing or termi

nation behavior of a program based on secret or untrusted data. Attacks usi

ng these covert channels have been published and are known to work in pract

ice; as techniques to prevent non-covert channels are becoming increasingl

y practical, covert channels are likely to become even more attractive for
attackers to exploit.

The goal of this talk is to understand basics o

f secure information flow research, and explore in detail the subtleties o

f timing and termination security guarantees, and the strategies that can

be used to enforce them. We will also describe a novel strategy that provid

es stronger security guarantees than any known existing work.

Speaker

Bio:
Vineeth Kashyap is a second year PhD student in Computer Science at

University of California, Santa Barbara. His research interests span Progr

amming Languages, Security, Graph Theory. He has previously worked at Nat

ional Instruments R&D for the LabVIEW performance and compiler team. He is

originally from Bangalore, India.