We propose a method, based on program analysis and transformation, for eliminating timing
side channels in software code that implements security-critical applications. Our method …

Cache side-channel attacks extract secrets by examining how victim software accesses
cache. To date, practical attacks on crypto systems and media libraries are demonstrated …

Information leakage can have dramatic consequences on systems security. Among harmful
information leaks, the timing information leakage occurs whenever an attacker successfully …

Analyzing the behavior of a program running on a processor that supports speculative
execution is crucial for applications such as execution time estimation and side channel …

The timing characteristics of cache, a high-speed storage between the fast CPU and the
slow memory, may reveal sensitive information of a program, thus allowing an adversary to …

Power side-channel attacks, capable of deducing secret data using statistical analysis, have
become a serious threat. Random masking is a widely used countermeasure for removing …

For applications in worst-case execution time analysis and in security, it is desirable to
statically classify memory accesses into those that result in cache hits, and those that result …

A unified modeling framework for non-functional properties of a program is essential for
research in software analysis and verification, since it reduces burdens on individual …

Timing information leakage occurs whenever an attacker successfully deduces confidential
internal information by observing some timed information such as events with timestamps …

Dynamic Symbolic Execution (DSE) is an important method for testing of programs. An
important system on DSE is KLEE [1] which inputs a C/C++ program annotated with …