{"id":{"repo_id":"uiuc","oai_identifier":"oai:www.ideals.illinois.edu:2142/109366"},"canonical_url":"https://search.dev.ndltd.org/etd/uiuc/oai:www.ideals.illinois.edu:2142/109366","repository":{"repo_id":"uiuc","name":"University of Illinois - Urbana-Champaign","base_url":"https://www.ideals.illinois.edu/oai-pmh"},"display":{"title":"Transforming leaky COTS binaries into data-oblivious binaries","abstract":"\"The rise in microarchitecture side-channel attacks has significantly impacted the realm of hardware security today, and has left sensitive applications vulnerable to a wide set of attack vectors. It is crucial to develop effective and comprehensive mitigation strategies to protect vulnerable applications against these attack vectors. Recently, there has been a surge of efforts to defend against such attacks through data-oblivious programming, but no work exists today to transform \"\"unsafe\"\" COTS binaries into data-oblivious binaries. Achieving data-oblivious COTS binaries is challenging due to their complex nature and lack of clean abstractions. However, such a feat is necessary because many COTS binaries are already deployed in production and run on outdated vulnerable microarchitectures. This paper builds BinCloak, the first framework that can automatically transform x86 COTS binaries into side-channel resistant data-oblivious binaries. We do this by defining a data-oblivious program representation for program binaries, and implementing techniques to construct this representation and transform it into a data-oblivious binary. Finally, we show BinCloak can transform a wide range of applications, and is the first to transform large complex binaries of real-world cryptography applications such as Libgcrypt's RSA implementation.\"","abstract_html":""The rise in microarchitecture side-channel attacks has significantly impacted the realm of hardware security today, and has left sensitive applications vulnerable to a wide set of attack vectors. It is crucial to develop effective and comprehensive mitigation strategies to protect vulnerable applications against these attack vectors. Recently, there has been a surge of efforts to defend against such attacks through data-oblivious programming, but no work exists today to transform ""unsafe"" COTS binaries into data-oblivious binaries. Achieving data-oblivious COTS binaries is challenging due to their complex nature and lack of clean abstractions. However, such a feat is necessary because many COTS binaries are already deployed in production and run on outdated vulnerable microarchitectures. This paper builds BinCloak, the first framework that can automatically transform x86 COTS binaries into side-channel resistant data-oblivious binaries. We do this by defining a data-oblivious program representation for program binaries, and implementing techniques to construct this representation and transform it into a data-oblivious binary. Finally, we show BinCloak can transform a wide range of applications, and is the first to transform large complex binaries of real-world cryptography applications such as Libgcrypt's RSA implementation."","abstract_has_math":false,"creators":["El Hajj, Mohamad Hadi"],"institution":"University of Illinois at Urbana-Champaign","degree_name":"M.S.","degree_level":"Thesis","degree_discipline":"Electrical & Computer Engr","degree_department":null,"school":null,"contributors":["Fletcher, Christopher W"],"advisors":[],"committee_chairs":[],"committee_members":[],"year":2021,"date_issued":"2021-03-05T21:37:56Z","date_published":"2021-03-05T21:37:56Z","updated_at":"2026-07-22T22:24:50Z","subjects":["security","binary","cots","side-channel","hardware","bincloak","data-oblivious","defence","mitigation","x86","microarchitecture"],"languages":["en"],"rights":["Copyright 2020 Mohamad El Hajj"],"rights_urls":[],"identifier_entries":[]},"links":{"outbound_url":"http://hdl.handle.net/2142/109366","outbound_label":"Handle","outbound_source":"dc:identifier"},"metadata_groups":[{"id":"people","label":"People","entries":[{"key":"dc:contributor","label":"Contributor","values":["Fletcher, Christopher W"]},{"key":"dc:creator","label":"Author","values":["El Hajj, Mohamad Hadi"]}]},{"id":"academic_context","label":"Academic Context","entries":[{"key":"dc:date","label":"Dc Date","values":["2021-03-05T21:37:56Z","2020-11-19","2020-12"]},{"key":"dc:type","label":"Dc Type","values":["text","Thesis"]},{"key":"thesis:degree_discipline","label":"Discipline","values":["Electrical & Computer Engr"]},{"key":"thesis:degree_level","label":"Degree Level","values":["Thesis"]},{"key":"thesis:degree_name","label":"Degree Name","values":["M.S."]},{"key":"thesis:institution_name","label":"Thesis Institution Name","values":["University of Illinois at Urbana-Champaign"]}]},{"id":"subjects_keywords","label":"Subjects and Keywords","entries":[{"key":"dc:subject","label":"Dc Subject","values":["security","binary","cots","side-channel","hardware","bincloak","data-oblivious","defence","mitigation","x86","microarchitecture"]}]},{"id":"language_rights","label":"Language and Rights","entries":[{"key":"dc:language","label":"Dc Language","values":["en"]},{"key":"dc:rights","label":"Dc Rights","values":["Copyright 2020 Mohamad El Hajj"]}]},{"id":"identifiers","label":"Identifiers","entries":[{"key":"dc:identifier","label":"Identifier","values":["http://hdl.handle.net/2142/109366"]}]},{"id":"additional","label":"Additional Metadata","entries":[{"key":"dc:description","label":"Description","values":["\"The rise in microarchitecture side-channel attacks has significantly impacted the realm of hardware security today, and has left sensitive applications vulnerable to a wide set of attack vectors. It is crucial to develop effective and comprehensive mitigation strategies to protect vulnerable applications against these attack vectors. Recently, there has been a surge of efforts to defend against such attacks through data-oblivious programming, but no work exists today to transform \"\"unsafe\"\" COTS binaries into data-oblivious binaries. Achieving data-oblivious COTS binaries is challenging due to their complex nature and lack of clean abstractions. However, such a feat is necessary because many COTS binaries are already deployed in production and run on outdated vulnerable microarchitectures. This paper builds BinCloak, the first framework that can automatically transform x86 COTS binaries into side-channel resistant data-oblivious binaries. We do this by defining a data-oblivious program representation for program binaries, and implementing techniques to construct this representation and transform it into a data-oblivious binary. Finally, we show BinCloak can transform a wide range of applications, and is the first to transform large complex binaries of real-world cryptography applications such as Libgcrypt's RSA implementation.\"","Submission original under an indefinite embargo labeled 'Open Access'. The submission was exported from vireo on 2021-03-04 without embargo terms","The student, Mohamad Hadi El Hajj, accepted the attached license on 2020-11-17 at 23:52.","The student, Mohamad Hadi El Hajj, submitted this Thesis for approval on 2020-11-18 at 00:02.","This Thesis was approved for publication on 2020-11-19 at 10:38.","DSpace SAF Submission Ingestion Package generated from Vireo submission #15898 on 2021-03-04 at 15:34:37","Made available in DSpace on 2021-03-05T21:37:56Z (GMT). No. of bitstreams: 3 ELHAJJ-THESIS-2020.pdf: 989232 bytes, checksum: 59300f16f232791215594cc9cf882eda (MD5) MOHAMAD HADI EL HAJJ - Master's Thesis.zip: 1680691 bytes, checksum: 60c33cd09a4d36501db27ad52f643d30 (MD5) LICENSE.txt: 4217 bytes, checksum: 5bc81a2f9345a64b80e127e5d46c3dcb (MD5) Previous issue date: 2020-11-19"]},{"key":"dc:format","label":"Dc Format","values":["application/pdf"]},{"key":"dc:title","label":"Title","values":["Transforming leaky COTS binaries into data-oblivious binaries"]}]}],"canonical_facts":{"dc:contributor":["Fletcher, Christopher W"],"dc:creator":["El Hajj, Mohamad Hadi"],"dc:date":["2021-03-05T21:37:56Z","2020-11-19","2020-12"],"dc:description":["\"The rise in microarchitecture side-channel attacks has significantly impacted the realm of hardware security today, and has left sensitive applications vulnerable to a wide set of attack vectors. It is crucial to develop effective and comprehensive mitigation strategies to protect vulnerable applications against these attack vectors. Recently, there has been a surge of efforts to defend against such attacks through data-oblivious programming, but no work exists today to transform \"\"unsafe\"\" COTS binaries into data-oblivious binaries. Achieving data-oblivious COTS binaries is challenging due to their complex nature and lack of clean abstractions. However, such a feat is necessary because many COTS binaries are already deployed in production and run on outdated vulnerable microarchitectures. This paper builds BinCloak, the first framework that can automatically transform x86 COTS binaries into side-channel resistant data-oblivious binaries. We do this by defining a data-oblivious program representation for program binaries, and implementing techniques to construct this representation and transform it into a data-oblivious binary. Finally, we show BinCloak can transform a wide range of applications, and is the first to transform large complex binaries of real-world cryptography applications such as Libgcrypt's RSA implementation.\"","Submission original under an indefinite embargo labeled 'Open Access'. The submission was exported from vireo on 2021-03-04 without embargo terms","The student, Mohamad Hadi El Hajj, accepted the attached license on 2020-11-17 at 23:52.","The student, Mohamad Hadi El Hajj, submitted this Thesis for approval on 2020-11-18 at 00:02.","This Thesis was approved for publication on 2020-11-19 at 10:38.","DSpace SAF Submission Ingestion Package generated from Vireo submission #15898 on 2021-03-04 at 15:34:37","Made available in DSpace on 2021-03-05T21:37:56Z (GMT). No. of bitstreams: 3 ELHAJJ-THESIS-2020.pdf: 989232 bytes, checksum: 59300f16f232791215594cc9cf882eda (MD5) MOHAMAD HADI EL HAJJ - Master's Thesis.zip: 1680691 bytes, checksum: 60c33cd09a4d36501db27ad52f643d30 (MD5) LICENSE.txt: 4217 bytes, checksum: 5bc81a2f9345a64b80e127e5d46c3dcb (MD5) Previous issue date: 2020-11-19"],"dc:format":["application/pdf"],"dc:identifier":["http://hdl.handle.net/2142/109366"],"dc:language":["en"],"dc:rights":["Copyright 2020 Mohamad El Hajj"],"dc:subject":["security","binary","cots","side-channel","hardware","bincloak","data-oblivious","defence","mitigation","x86","microarchitecture"],"dc:title":["Transforming leaky COTS binaries into data-oblivious binaries"],"dc:type":["text","Thesis"],"thesis:degree_discipline":["Electrical & Computer Engr"],"thesis:degree_level":["Thesis"],"thesis:degree_name":["M.S."],"thesis:institution_name":["University of Illinois at Urbana-Champaign"]},"updated_at":"2026-07-22T22:24:50Z"}