OGST - Weiyi Wu
Title: Timing Information Flow Control
Abstract: Cloud computing becomes popular recently, and customers enjoy low cost from statistical multiplexing. However, it’s vulnerable against timing attacks which leverages shared resources and the multiplexing technique. TIFC is a system that limits timing channel capacity in cloud. It extends certikos as hypervisor while keeps property of deterministic execution. And it guarantees that no timing channel can be constructed inside deterministic domain, and timing channel across boundary is strictly controlled with very limited capacity.