Modern embedded and cyber-physical systems are ubiquitous. Many critical cyber-physical
systems have real-time requirements (eg, avionics, automobiles, power grids, manufacturing …

The high degree of predictability in real-time systems makes it possible for adversaries to
launch timing inference attacks such as those based on side-channels and covert-channels …

The secure functioning of automotive systems is vital to the safety of their passengers and
other roadway users. One of the critical functions for safety is the controller area network …

System auditing is an essential tool for detecting malicious events and conducting forensic
analysis. Although used extensively on general-purpose systems, auditing frameworks have …

Abstract Information disclosure leads to serious exploits, disruption or damage of critical
operations and privacy breaches, both in Critical Infrastructures (CIs) and Industrial Control …

Embedded real-time systems (RTS) are pervasive. Many modern RTS are exposed to
unknown security flaws, and threats to RTS are growing in both number and sophistication …

Abstract System auditing is a powerful tool that provides insight into the nature of suspicious
events in computing systems, allowing machine operators to detect and subsequently …

Recent work has shown that the timing behavior of a real-time system can be utilized by
attackers for various adverse purposes via schedule-based timing side-channel attacks. An …

This paper identifies and studies a new security/privacy issue for automobile vehicles.
Specifically, attackers can infer the engine speed of a vehicle by observing and analyzing …

We study covert queueing channels (CQCs), which are a kind of covert timing channel that
may be exploited in shared queues across supposedly isolated users. In our system model …