Mediaspace scheduled maintenance: Aug 25, 2026 07:00 - 12:00 AM. During this time, videos will be temporarily unavailable. Check status updates.

Lecture

Verifying Security Across Hardware & Software

Description

This lecture covers the verification of security across hardware and software, including verified algorithms like SSL, TLS, and SHA used in major systems, as well as techniques for automatically eliminating speculative leaks and verifying distributed programs. It also discusses the application of Iodine to verify constant time for hardware, catching timing attacks via coloring, and the use of Blade to fix speculation bugs in software. The instructor presents benchmarks, assumptions, and challenges in verifying constant time for hardware, emphasizing the importance of making assumptions about hardware explicit to avoid bugs in verified software.

This video is available exclusively on Mediaspace for a restricted audience. Please log in to MediaSpace to access it if you have the necessary permissions.

Watch on Mediaspace

Official source

Related concepts (32)

Speculative execution

Speculative execution is an optimization technique where a computer system performs some task that may not be needed. Work is done before it is known whether it is actually needed, so as to prevent a delay that would have to be incurred by doing the work after it is known that it is needed. If it turns out the work was not needed after all, most changes made by the work are reverted and the results are ignored. The objective is to provide more concurrency if extra resources are available.

Out-of-order execution

In computer engineering, out-of-order execution (or more formally dynamic execution) is a paradigm used in most high-performance central processing units to make use of instruction cycles that would otherwise be wasted. In this paradigm, a processor executes instructions in an order governed by the availability of input data and execution units, rather than by their original order in a program. In doing so, the processor can avoid being idle while waiting for the preceding instruction to complete and can, in the meantime, process the next instructions that are able to run immediately and independently.

Graph coloring

In graph theory, graph coloring is a special case of graph labeling; it is an assignment of labels traditionally called "colors" to elements of a graph subject to certain constraints. In its simplest form, it is a way of coloring the vertices of a graph such that no two adjacent vertices are of the same color; this is called a vertex coloring. Similarly, an edge coloring assigns a color to each edge so that no two adjacent edges are of the same color, and a face coloring of a planar graph assigns a color to each face or region so that no two faces that share a boundary have the same color.

Free software

Free software or libre software or libreware is computer software distributed under terms that allow users to run the software for any purpose as well as to study, change, and distribute it and any adapted versions. Free software is a matter of liberty, not price; all users are legally free to do what they want with their copies of a free software (including profiting from them) regardless of how much is paid to obtain the program.

Proprietary software

Proprietary software is software that, according to the free and open-source software community, grants its creator, publisher, or other rightsholder or rightsholder partner a legal monopoly by modern copyright and intellectual property law to exclude the recipient from freely sharing the software or modifying it, and—in some cases, as is the case with some patent-encumbered and EULA-bound software—from making use of the software on their own, thereby restricting their freedoms.

Related lectures (33)

NIOSII Custom Instruction & Profiling

Explores custom instruction implementation, software and hardware profiling, and the importance of performance optimization.

Computing: From 1 and 0 to Databases

Introduces computing basics, from logic gates to databases, emphasizing data integrity.

Engineering Multi-Scale Systems

Introduces the Swiss Research Program focused on engineering multi-scale systems for health, security, energy, and the environment.

Principles I: Economy of Mechanism & Fail-safe Defaults

Discusses the 'economy of mechanism' and 'fail-safe default' principles in computer security.

Redox Reactions: Half-Reactions, Potentials, and Applications