DISARM: Target Electronic Device Informed Mitigation of Software Runtime Side-Channel Vulnerabilities
For developers of security-critical software on embedded devices, DISARM provides a more effective mitigation against timing side-channel attacks by incorporating device-specific timing information.
DISARM proposes a joint hardware-software methodology that uses real device timing values to generate targeted software fixes for runtime side-channel vulnerabilities, outperforming state-of-the-art solutions like PENDULUM and DifFuzzAR in execution time overhead, code size overhead, and correctness across 22 benchmarks on five devices.
Program runtime or timing attacks exploit variations in a program's execution times to extract sensitive information from the program (e.g. encryption keys, sensitive variable data, intellectual property). State-of-the-art solutions to runtime side-channel attacks attempt to balance the execution time of the sensitive code for different control flow paths to eliminate the timing leakage. However, during the mitigation process, most techniques do not consider the underlying hardware or device on which the target program is supposed to run on. This can lead to over-fixing (unnecessary extra operations), under-fixing (not solving the imbalance properly), and even failures. We propose DISARM, a joint hardware-software methodology (unlike any existing solution) for mitigating runtime side-channel vulnerabilities that utilizes timing values from real embedded devices to generate targeted software fixes. We implement DISARM to support C, C++, and Java source codes and validate it across 22 standard benchmarks. DISARM outperforms state-of-the-art solutions such as PENDULUM and DifFuzzAR in terms of execution time overhead, code size overhead, and correctness on five different embedded or edge devices.