TWC: Medium: Detection and Prevention of Data Timing Channels

TWC：中：数据时序通道的检测和预防

• 批准号: 1514435
• 负责人: Ranjit Jhala
• 金额: $ 120万
• 依托单位: University of California-San Diego
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2015
• 资助国家: 美国
• 起止时间: 2015-07-01 至 2021-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1514435&HistoricalAwards=false
• 关键词: TWC; Medium; Detection; Prevention; Data

In the era of "big data" and "cloud computing", it is critically important that we are able to protect sensitive data, and prevent it from being leaked. The goal of this project is to explore a new kind of attack, called data timing attacks, which circumvents known defenses, and allows adversaries to exfiltrate private information from web browsers and privacy preserving databases.This project investigates not only how prevalent data timing attacks are, but also how to prevent them. By developing techniques for understanding and mitigating data timing attacks, this project will provide better guarantees about the security of widely used software like web browsers, web servers, and databases, yielding safer and more secure systems for end-users. Finally, the project will elucidate what best programming practices should be taught to the next generation of programmers, so they can develop safe and secure software.

在“大数据”和“云计算”时代，如何保护敏感数据，防止其泄露是至关重要的。这个项目的目标是探索一种新的攻击，称为数据定时攻击，它绕过已知的防御，并允许对手从web浏览器和隐私保护数据库中窃取私人信息。该项目不仅研究了数据定时攻击的流行程度，还研究了如何防止它们。通过开发理解和减轻数据定时攻击的技术，该项目将为广泛使用的软件（如web浏览器、web服务器和数据库）的安全性提供更好的保证，为最终用户提供更安全、更可靠的系统。最后，该项目将阐明应该向下一代程序员传授哪些最佳编程实践，以便他们能够开发安全可靠的软件。