Lecture

Verifying Security Across Hardware & Software

Graph Chat

Chat with Graph Search

Ask any question about EPFL courses, lectures, exercises, research, news, etc. or try the example questions below.

DISCLAIMER: The Graph Chatbot is not programmed to provide explicit or categorical answers to your questions. Rather, it transforms your questions into API requests that are distributed across the various IT services officially administered by EPFL. Its purpose is solely to collect and recommend relevant references to content that you can explore to help you answer your questions.

Description

This lecture covers the verification of security across hardware and software, including verified algorithms like SSL, TLS, and SHA used in major systems, as well as techniques for automatically eliminating speculative leaks and verifying distributed programs. It also discusses the application of Iodine to verify constant time for hardware, catching timing attacks via coloring, and the use of Blade to fix speculation bugs in software. The instructor presents benchmarks, assumptions, and challenges in verifying constant time for hardware, emphasizing the importance of making assumptions about hardware explicit to avoid bugs in verified software.

Official source

Related concepts (32)

Speculative execution

Speculative execution is an optimization technique where a computer system performs some task that may not be needed. Work is done before it is known whether it is actually needed, so as to prevent a delay that would have to be incurred by doing the work after it is known that it is needed. If it turns out the work was not needed after all, most changes made by the work are reverted and the results are ignored. The objective is to provide more concurrency if extra resources are available.

Out-of-order execution

In computer engineering, out-of-order execution (or more formally dynamic execution) is a paradigm used in most high-performance central processing units to make use of instruction cycles that would otherwise be wasted. In this paradigm, a processor executes instructions in an order governed by the availability of input data and execution units, rather than by their original order in a program. In doing so, the processor can avoid being idle while waiting for the preceding instruction to complete and can, in the meantime, process the next instructions that are able to run immediately and independently.

Free software

Free software or libre software or libreware is computer software distributed under terms that allow users to run the software for any purpose as well as to study, change, and distribute it and any adapted versions. Free software is a matter of liberty, not price; all users are legally free to do what they want with their copies of a free software (including profiting from them) regardless of how much is paid to obtain the program.

Proprietary software

Proprietary software is software that, according to the free and open-source software community, grants its creator, publisher, or other rightsholder or rightsholder partner a legal monopoly by modern copyright and intellectual property law to exclude the recipient from freely sharing the software or modifying it, and—in some cases, as is the case with some patent-encumbered and EULA-bound software—from making use of the software on their own, thereby restricting their freedoms.

Software

Software is a set of computer programs and associated documentation and data. This is in contrast to hardware, from which the system is built and which actually performs the work. At the lowest programming level, executable code consists of machine language instructions supported by an individual processor—typically a central processing unit (CPU) or a graphics processing unit (GPU). Machine language consists of groups of binary values signifying processor instructions that change the state of the computer from its preceding state.

Related lectures (64)

Process Protection and Efficient Execution

Explores process execution, protection, and efficient OS mechanisms for secure and reliable multi-program environments.

Principles I: Economy of Mechanism & Fail-safe Defaults

Discusses the 'economy of mechanism' and 'fail-safe default' principles in computer security.

Computing: From 1 and 0 to Databases

Introduces computing basics, from logic gates to databases, emphasizing data integrity.

Introduction to REAPER Software

Introduces the REAPER V6.23 software, covering its features and licensing policy.

Design and Fundamentals of Digital Systems