[Colloquium] CS Seminar February 10: Tegan Brennan, UCSB

[Sandra Wallace]

UNIVERSITY OF CHICAGO
DEPARTMENT OF COMPUTER SCIENCE
PRESENTS




Tegan Brennan
University of California, Santa Barbara

Monday, February 10 at 3:30 pm
Crerar 390

Title:  Software Side Channels 

Abstract:
Side channels in software are a class of information leaks where non-functional side effects of software systems (such as execution time, memory usage or power consumption) can leak information about sensitive data. In this talk, I present my research on a new class of side-channel vulnerabilities: JIT-induced side channels. In contrast to side channels introduced at the source code level, JIT-induced side channels arise at runtime due to the behavior of just-in-time (JIT) compilation.  I show the existence of this class of side channels across multiple runtimes, and I demonstrate JIT-induced timing channels in large, open source projects large enough in magnitude to be detected over the public internet. I also present an automated approach to inducing this type of side channel in programs. In evaluating my automated technique, I show that programs classified as side-channel free by four state-of-the-art side channel analysis tools are, in fact, vulnerable to JIT-induced side channels. Finally, I discuss my contributions towards scalable quantification of side-channel vulnerabilities through a caching framework for model-counting queries. 

Bio:
Tegan Brennan is a PhD candidate in Computer Science at the University of California, Santa Barbara. Her research is in software engineering, formal verification and computer security. She has worked extensively on side-channel vulnerabilities in software. Tegan is a recipient of an IGERT Fellowship in Network Science, an NCWIT Collegiate Award Honorable Mention in 2018 and an invited participant of the 2019 Rising Stars workshop. She has interned twice with Amazon’s Automated Reasoning Group. Tegan is also an aerialist and competitive ballroom dancer. 
 
Host:  Blase Ur

PDF:
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.cs.uchicago.edu/pipermail/colloquium/attachments/20200127/7363f028/attachment-0003.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PastedGraphic-3.tiff
Type: image/tiff
Size: 74952 bytes
Desc: not available
URL: <http://mailman.cs.uchicago.edu/pipermail/colloquium/attachments/20200127/7363f028/attachment-0001.tiff>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.cs.uchicago.edu/pipermail/colloquium/attachments/20200127/7363f028/attachment-0004.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Brennan poster.pdf
Type: application/pdf
Size: 1471806 bytes
Desc: not available
URL: <http://mailman.cs.uchicago.edu/pipermail/colloquium/attachments/20200127/7363f028/attachment-0001.pdf>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.cs.uchicago.edu/pipermail/colloquium/attachments/20200127/7363f028/attachment-0005.html>