loading...
Building Intrusion-Tolerant Secure Software
San Jose, California March 20-March 23
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/CGO.2005.8International Symposium on Code Gener ...
 This Article 
 
PDF
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Tao Zhang, Georgia Institute of Technology, Atlanta, GA
Xiaotong Zhuang, Georgia Institute of Technology, Atlanta, GA
Santosh Pande, Georgia Institute of Technology, Atlanta, GA
In this work, we develop a secret sharing based compiler solution to achieve confidentiality, integrity and availability (intrusion tolerance) of critical data together, rather than tackling them one by one as in previous approaches. Under our scheme, some critical data values are automatically identified by the compiler, whereas some others are specified by the user. The compiler generates code for scattering/assembling and verifying of those critical data values using secret sharing scheme. In this way, we achieve data confidentiality and integrity. We also provide mechanisms to gracefully recover upon data tampering, achieving intrusion tolerance. The implementation of our secret sharing scheme is carefully crafted to achieve low overhead. We further propose several compiler optimizations such as secret-sharing-aware register allocation, rematerialization etc. to reduce the cost of secret sharing further, making our scheme a practical solution in a high performance system.
Citation:
Tao Zhang, Xiaotong Zhuang, Santosh Pande, "Building Intrusion-Tolerant Secure Software," cgo, pp.255-266, International Symposium on Code Generation and Optimization (CGO'05), 2005
Usage of this product signifies your acceptance of the Terms of Use.