Quantitative Static Timing Analysis - Inria - Institut national de recherche en sciences et technologies du numérique
Communication Dans Un Congrès Année : 2024

Quantitative Static Timing Analysis

Résumé

Programming errors in software applications can often be difficult to detect, as they may appear without clear indications of failure. One such example is when certain input variables have an unexpected impact on the program's behavior. As an indicator of the program's runtime behavior, this work studies the impact of input variables on the number of loop iterations in a program. Such information is valuable for debugging, optimizing performance, and analyzing security vulnerabilities, such as in side-channel attacks where execution times can be exploited. To address this issue, we propose a sound static analysis based on abstract interpretation to quantify the impact of each input variable on the global number of iterations. Our approach combines a dependency analysis with a global loop bound analysis to derive an over-approximation of the impact quantity. We demonstrate our prototype tool in the S2N-Bignum library for cryptographic systems to certify the absence of timing side-channels.
Fichier principal
Vignette du fichier
paper7.pdf (5.49 Mo) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04669723 , version 1 (09-08-2024)

Identifiants

  • HAL Id : hal-04669723 , version 1

Citer

Denis Mazzucato, Marco Campion, Caterina Urban. Quantitative Static Timing Analysis. 31st Static Analysis Symposium (SAS 2024), Roberto Giacobazzi; Alessandra Gorla; Marco Campion, Oct 2024, Pasadena, CA, United States. ⟨hal-04669723⟩
98 Consultations
52 Téléchargements

Partager

More