Transforming leaky COTS binaries into data-oblivious binaries

"The rise in microarchitecture side-channel attacks has significantly impacted the realm of hardware security today, and has left sensitive applications vulnerable to a wide set of attack vectors. It is crucial to develop effective and comprehensive mitigation strategies to protect vulnerable applications against these attack vectors. Recently, there has been a surge of efforts to defend against such attacks through data-oblivious programming, but no work exists today to transform ""unsafe"" COTS binaries into data-oblivious binaries. Achieving data-oblivious COTS binaries is challenging due to their complex nature and lack of clean abstractions. However, such a feat is necessary because many COTS binaries are already deployed in production and run on outdated vulnerable microarchitectures. This paper builds BinCloak, the first framework that can automatically transform x86 COTS binaries into side-channel resistant data-oblivious binaries. We do this by defining a data-oblivious program representation for program binaries, and implementing techniques to construct this representation and transform it into a data-oblivious binary. Finally, we show BinCloak can transform a wide range of applications, and is the first to transform large complex binaries of real-world cryptography applications such as Libgcrypt's RSA implementation."

Name thesis:degree_name

M.S.

Level thesis:degree_level

Thesis

Discipline thesis:degree_discipline

Electrical & Computer Engr

Grantor

University of Illinois at Urbana-Champaign

Year dc:date

2021

Author dc:creator

• El Hajj, Mohamad Hadi

Contributors dc:contributor

• Fletcher, Christopher W

• security
• binary
• cots
• side-channel
• hardware
• bincloak
• data-oblivious
• defence
• mitigation
• x86
• microarchitecture

Statement dc:rights

• Copyright 2020 Mohamad El Hajj

Language dc:language

en

Handle dc:identifier

http://hdl.handle.net/2142/109366

OAI identifier oai:identifier

oai:www.ideals.illinois.edu:2142/109366