Timing correctness is crucial in a multi-criticality real-time system, such as an autonomous
driving system. It has been recently shown that these systems can be vulnerable to timing …

Over the course of recent years, microarchitectural side-channel attacks emerged as one of
the most novel and thought-provoking attacks to exfiltrate information from a computing …

While system administrators would prefer to configure their systems so that their loggers
capture as much details as possible, such details may include sensitive information. In …

The Butterfly Attack, introduced in an RTSS 2019 paper, was billed as a new kind of timing
attack against control loops in cyber-physical systems. We conduct a close inspection of the …

Most software programs in modern Internet-of-Things (IoT) systems in diverse domains such
as healthcare, smart cities, banking, and industrial automation deal with secret data/assets …

With the advent of edge computing, there has been a substantial growth of connected
devices. Several of these devices, including internet-of-things (IoT), smartphones …

Schedule randomization is one of the recently introduced security defenses against
schedule-based attacks, ie, attacks whose success depends on a particular ordering …

This study investigates the presence of illicit information flows in fixed-priority multiframe real-
time systems. We identify an algorithmic covert channel (called FrameLeaker) that enables a …

ARM TrustZone provides a Trusted Execution Environment (TEE) to isolate security-critical
services, which are generally invoked from the Rich Execution Environment (REE) through a …

As malware in IoT devices flourishes, defenses are lacking. Traditional antivirus or intrusion
detection-based defense techniques fail for the limited computational capabilities and the …