<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><br class=""><div dir="auto" class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div dir="auto" class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><br class=""><b class="" style="orphans: 2; widows: 2;"><font size="4" class=""><div class=""><b class=""><span class="" style="font-size: 12pt; font-family: "Times New Roman", serif;"></span></b></div><div class=""><b class=""><font size="4" class="">Tegan Brennan</font></b></div></font></b><div dir="auto" class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div dir="auto" class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div dir="auto" class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div dir="auto" class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div dir="auto" class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div dir="auto" class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div dir="auto" class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div dir="auto" class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div dir="auto" class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div dir="auto" class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div dir="auto" class="" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div class="" style="orphans: 2; widows: 2;"><div class="" style="margin: 0in 0in 0.0001pt;"><i class=""><font size="4" class="">University of California, Santa Barbara</font></i></div><div class="" style="margin: 0in 0in 0.0001pt;"><span class="" style="font-size: 14px;"><i class=""><p class="MsoNormal" align="center"><o:p class=""></o:p></p></i></span><div class=""><br class=""></div></div><div class="" style="margin: 0in 0in 0.0001pt;"><span class=""><b class=""><font class="" size="4">Monday, February 10 at 3:30 pm<br class="">Crerar 390</font></b><br class=""></span></div></div><div class=""><div class="" style="text-align: center;"><font size="4" class=""><font class=""><span class=""><b class="" style="color: rgb(33, 33, 33);"><br class=""></b></span></font></font></div><div class=""><font size="4" class=""><font class=""><span class=""><b class="" style="color: rgb(33, 33, 33);">Title: </b></span></font></font><font size="4" class=""><b class="">Software Side Channels </b></font></div><div class="" style="color: rgb(33, 33, 33);"><b class=""><font class="" style="font-size: 15px;"><br class=""></font></b></div><div class="" style="color: rgb(33, 33, 33);"><b class=""><font class="" size="4">Abstract:</font></b></div><div class=""><font class=""><span class=""><div class="" style="font-variant-ligatures: normal; background-color: rgb(255, 255, 255);"><div class=""><font class="" size="4"><span class=""><span id="docs-internal-guid-bf351367-7fff-5067-8c8e-0130cc54a81c" class=""><div class="" style="line-height: 1.38; margin-top: 0pt; margin-bottom: 0pt;"><span class=""><span class=""><span class=""><span class=""><span class=""><span class="" style="white-space: pre-wrap;">Side channels in software are a class of information leaks where non-functional side effects of software systems (such as execution time, memory usage or power consumption) can leak information about sensitive data. In this talk, I present my research on a new class of side-channel vulnerabilities: JIT-induced side channels. In contrast to side channels introduced at the source code level, JIT-induced side channels arise at runtime due to the behavior of just-in-time (JIT) compilation. I show the existence of this class of side channels across multiple runtimes, and I demonstrate JIT-induced timing channels in large, open source projects large enough in magnitude to be detected over the public internet. I also present an automated approach to inducing this type of side channel in programs. In evaluating my automated technique, I show that programs classified as side-channel free by four state-of-the-art side channel analysis tools are, in fact, vulnerable to JIT-induced side channels. Finally, I discuss my contributions towards scalable quantification of side-channel vulnerabilities through a caching framework for model-counting queries. </span><br class=""><br class=""></span></span></span></span></span></div></span></span><b class="" style="color: rgb(33, 33, 33);">Bio:</b></font></div></div></span></font></div><div class=""><div class="" style="font-variant-ligatures: normal; background-color: rgb(255, 255, 255);"><font color="#222222" class=""><font size="4" class=""><i class="">Tegan Brennan is a PhD candidate in Computer Science at the University of California, Santa Barbara. Her research is in software engineering, formal verification and computer security. She has worked extensively on side-channel vulnerabilities in software. Tegan is a recipient of an IGERT Fellowship in Network Science, an NCWIT Collegiate Award Honorable Mention in 2018 and an invited participant of the 2019 Rising Stars workshop. She has interned twice with Amazon’s Automated Reasoning Group. Tegan is also an aerialist and competitive ballroom dancer. </i><br class=""><i class=""> </i></font><br class=""><i class=""><b class=""><font size="4" class="">Host: Blase Ur</font></b></i></font></div><div class="" style="font-variant-ligatures: normal; background-color: rgb(255, 255, 255);"><font color="#222222" class=""><i class=""><b class=""><font size="4" class=""><br class=""></font></b></i></font></div><div class="" style="font-variant-ligatures: normal; background-color: rgb(255, 255, 255);"><font color="#222222" class=""><i class=""><b class=""><font size="4" class="">PDF:</font></b></i></font></div><div class="" style="font-variant-ligatures: normal; background-color: rgb(255, 255, 255);"><font color="#222222" class=""><i class=""><b class=""><font size="4" class=""></font></b></i></font></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></body></html>