TWC: Medium: Detection and Prevention of Data Timing Channels

TWC：中：数据时序通道的检测和预防

• 批准号: 1514435
• 负责人: Ranjit Jhala
• 金额: $ 120万
• 依托单位: University of California-San Diego
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2015
• 资助国家: 美国
• 起止时间: 2015-07-01 至 2021-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1514435&HistoricalAwards=false
• 关键词: TWC; Medium; Detection; Prevention; Data

In the era of "big data" and "cloud computing", it is critically important that we are able to protect sensitive data, and prevent it from being leaked. The goal of this project is to explore a new kind of attack, called data timing attacks, which circumvents known defenses, and allows adversaries to exfiltrate private information from web browsers and privacy preserving databases.This project investigates not only how prevalent data timing attacks are, but also how to prevent them. By developing techniques for understanding and mitigating data timing attacks, this project will provide better guarantees about the security of widely used software like web browsers, web servers, and databases, yielding safer and more secure systems for end-users. Finally, the project will elucidate what best programming practices should be taught to the next generation of programmers, so they can develop safe and secure software.

在“大数据”和“云计算”时代，保护敏感数据并防止其泄露至关重要。该项目的目标是探索一种称为数据定时攻击的新型攻击，它可以绕过已知的防御措施，并允许对手从网络浏览器和隐私保护数据库中窃取私人信息。该项目不仅调查数据定时攻击的流行程度，以及如何预防它们。通过开发理解和减轻数据定时攻击的技术，该项目将为网络浏览器、网络服务器和数据库等广泛使用的软件的安全性提供更好的保证，为最终用户提供更安全的系统。最后，该项目将阐明应该向下一代程序员传授哪些最佳编程实践，以便他们能够开发安全可靠的软件。