TWC: Medium: Detection and Prevention of Data Timing Channels

在“大数据”和“云计算”时代，我们能够保护敏感数据并防止其泄露至关重要。本项目的目标是探索一种新的攻击，称为数据定时攻击，它绕过已知的防御，并允许对手从Web浏览器和隐私保护数据库中泄露私人信息。本项目不仅调查数据定时攻击的流行程度，而且还调查如何防止它们。通过开发理解和减轻数据定时攻击的技术，该项目将为广泛使用的软件（如Web浏览器，Web服务器和数据库）的安全性提供更好的保证，为最终用户提供更安全，更安全的系统。最后，该项目将阐明应该向下一代程序员传授哪些最佳编程实践，以便他们能够开发安全可靠的软件。

In the era of "big data" and "cloud computing", it is critically important that we are able to protect sensitive data, and prevent it from being leaked. The goal of this project is to explore a new kind of attack, called data timing attacks, which circumvents known defenses, and allows adversaries to exfiltrate private information from web browsers and privacy preserving databases.This project investigates not only how prevalent data timing attacks are, but also how to prevent them. By developing techniques for understanding and mitigating data timing attacks, this project will provide better guarantees about the security of widely used software like web browsers, web servers, and databases, yielding safer and more secure systems for end-users. Finally, the project will elucidate what best programming practices should be taught to the next generation of programmers, so they can develop safe and secure software.