The FLINT Project

Research

People

Publications

Software

Support

Links

Internal

Blinder: Partition-Oblivious Hierarchical Scheduling

Last modified: Sat Oct 3 01:52:26 2020 GMT.

Authors

Man-Ki Yoon
Mengqi Liu
Hao Chen
Jung-Eun Kim
Zhong Shao

Abstract

Hierarchical scheduling enables modular reasoning of the temporal behavior of individual applications by partitioning CPU time and thus isolating potential mis-behavior. However, conventional time-partitioning mechanisms fail to achieve strong temporal isolation from a security viewpoint; variations in the executions of partitions can be perceived by others, which enables an algorithmic covert timing-channel between partitions that are completely isolated from each other in the utilization of time. Thus, we present a run-time algorithm that makes partitions oblivious to others' varying behaviors even when an adversary has full control over their timings. It enables the use of dynamic time-partitioning mechanisms that provide improved responsiveness, while guaranteeing the algorithmic-level non-interference that static approaches would achieve. From an implementation on an existing operating system, we evaluate the costs of the solution in terms of the responsiveness as well as scheduling overhead.

Published

In Proceedings of the 30th USENIX Security Symposium (USENIX Security 2021), August 2021.
  • Conference Paper [PDF]

  • Copyright © 1996-2021 The FLINT Group <flint at cs dot yale dot edu>
    Yale University Department of Computer Science
    Validate this page
    colophon