skip to main content

This content will become publicly available on November 11, 2022

Title: Indistinguishability Prevents Scheduler Side Channels in Real-Time Systems
Scheduler side-channels can leak critical information in real-time systems, thus posing serious threats to many safety-critical applications. The main culprit is the inherent determinism in the runtime timing behavior of such systems, e.g., the (expected) periodic behavior of critical tasks. In this paper, we introduce the notion of "schedule indistinguishability/", inspired by work in differential privacy, that introduces diversity into the schedules of such systems while offering analyzable security guarantees. We achieve this by adding a sufficiently large (controlled) noise to the task schedules in order to break their deterministic execution patterns. An "epsilon-Scheduler" then implements schedule indistinguishability in real-time Linux. We evaluate our system using two real applications: (a) an autonomous rover running on a real hardware platform (Raspberry Pi) and (b) a video streaming application that sends data across large geographic distances. Our results show that the epsilon-Scheduler offers better protection against scheduler side-channel attacks in real-time systems while still maintaining good performance and quality-of-service(QoS) requirements.
Authors:
; ;
Award ID(s):
1718952
Publication Date:
NSF-PAR ID:
10313430
Journal Name:
Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security
Sponsoring Org:
National Science Foundation
More Like this
  1. The concept of Industry 4.0 introduces the unification of industrial Internet-of-Things (IoT), cyber physical systems, and data-driven business modeling to improve production efficiency of the factories. To ensure high production efficiency, Industry 4.0 requires industrial IoT to be adaptable, scalable, real-time, and reliable. Recent successful industrial wireless standards such as WirelessHART appeared as a feasible approach for such industrial IoT. For reliable and real-time communication in highly unreliable environments, they adopt a high degree of redundancy. While a high degree of redundancy is crucial to real-time control, it causes a huge waste of energy, bandwidth, and time under a centralizedmore »approach and are therefore less suitable for scalability and handling network dynamics. To address these challenges, we propose DistributedHART—a distributed real-time scheduling system for WirelessHART networks. The essence of our approach is to adopt local (node-level) scheduling through a time window allocation among the nodes that allows each node to schedule its transmissions using a real-time scheduling policy locally and online. DistributedHART obviates the need of creating and disseminating a central global schedule in our approach, thereby significantly reducing resource usage and enhancing the scalability. To our knowledge, it is the first distributed real-time multi-channel scheduler for WirelessHART. We have implemented DistributedHART and experimented on a 130-node testbed. Our testbed experiments as well as simulations show at least 85% less energy consumption in DistributedHART compared to existing centralized approach while ensuring similar schedulability.« less
  2. Wallach, H (Ed.)
    How can we help a forgetful learner learn multiple concepts within a limited time frame? While there have been extensive studies in designing optimal schedules for teaching a single concept given a learner's memory model, existing approaches for teaching multiple concepts are typically based on heuristic scheduling techniques without theoretical guarantees. In this paper, we look at the problem from the perspective of discrete optimization and introduce a novel algorithmic framework for teaching multiple concepts with strong performance guarantees. Our framework is both generic, allowing the design of teaching schedules for different memory models, and also interactive, allowing the teachermore »to adapt the schedule to the underlying forgetting mechanisms of the learner. Furthermore, for a well-known memory model, we are able to identify a regime of model parameters where our framework is guaranteed to achieve high performance. We perform extensive evaluations using simulations along with real user studies in two concrete applications: (i) an educational app for online vocabulary teaching; and (ii) an app for teaching novices how to recognize animal species from images. Our results demonstrate the effectiveness of our algorithm compared to popular heuristic approaches.« less
  3. Summary Slickwater fracturing has become one of the most leveraging completion technologies in unlocking hydrocarbon in unconventional reservoirs. In slickwater treatments, proppant transport becomes a big concern because of the inefficiency of low-viscosity fluids to suspend the particles. Many studies have been devoted to proppant transport experimentally and numerically. However, only a few focused on the proppant pumping schedules in slickwater fracturing. The impact of proppant schedules on well production remains unclear. The goal of our work is to simulate the proppant transport under real pumping schedules (multisize proppants and varying concentration) at the field scale and quantitatively evaluate themore »effects of proppant schedules on well production for slickwater fracturing. The workflow consists of three steps. First, a validated 3D multiphase particle-in-cell (MP-PIC) model has been used to simulate the proppant transport at real pumping schedules in a field-scale fracture (180-m length, 30-m height). Second, we applied a propped fracture conductivity model to calculate the distribution of propped fracture width, permeability, and fracture conductivity. In the last step, we incorporated the fracture geometry, propped fracture conductivity, and the estimated unpropped fracture conductivity into a reservoir simulation model to predict gas production. Based on the field designs of pumping schedules in slickwater treatments, we have generated four proppant schedules, in which 100-mesh and 40/70-mesh proppants were loaded successively with stair-stepped and incremental stages. The first three were used to study the effects of the mass percentages of the multisize proppants. From Schedules 1 through 3, the mass percentage of 100-mesh proppants is 30, 50, and 70%, respectively. Schedule 4 has the same proppant percentage as Schedule 2 but has a flush stage after slurry injection. The comparison between Schedules 2 and 4 enables us to evaluate the effect of the flush stage on well production. The results indicate that the proppant schedule has a significant influence on treatment performance. The schedule with a higher percentage of 100-mesh proppants has a longer proppant transport distance, a larger propped fracture area, but a lower propped fracture conductivity. Then, the reservoir simulation results show that both the small and large percentages of 100-mesh proppants cannot maximize well production because of the corresponding small propped area and low propped fracture conductivity. Schedule 2, with a median percentage (50%) of 100-mesh proppants, has the highest 1,000-day cumulative gas production. For Schedule 4, the flush stage significantly benefits the gas production by 8.2% because of a longer and more uniform proppant bed along the fracture. In this paper, for the first time, we provide both the qualitative explanation and quantitative evaluation for the impact of proppant pumping schedules on the performance of slickwater treatments at the field scale by using an integrated numerical simulation workflow, providing crucial insights for the design of proppant schedules in the field slickwater treatments.« less
  4. Public transit is a critical component of a smart and connected community. As such, citizens expect and require accurate information about real-time arrival/departures of transportation assets. As transit agencies enable large-scale integration of real-time sensors and support back-end data-driven decision support systems, the dynamic data-driven applications systems (DDDAS) paradigm becomes a promising approach to make the system smarter by providing online model learning and multi-time scale analytics as part of the decision support system that is used in the DDDAS feedback loop. In this paper, we describe a system in use in Nashville and illustrate the analytic methods developed bymore »our team. These methods use both historical as well as real-time streaming data for online bus arrival prediction. The historical data is used to build classifiers that enable us to create expected performance models as well as identify anomalies. These classifiers can be used to provide schedule adjustment feedback to the metro transit authority. We also show how these analytics services can be packaged into modular, distributed and resilient micro-services that can be deployed on both cloud back ends as well as edge computing resources.« less
  5. Csikász-Nagy, Attila (Ed.)
    Which suggestions for behavioral modifications, based on mathematical models, are most likely to be followed in the real world? We address this question in the context of human circadian rhythms. Jet lag is a consequence of the misalignment of the body’s internal circadian (~24-hour) clock during an adjustment to a new schedule. Light is the clock’s primary synchronizer. Previous research has used mathematical models to compute light schedules that shift the circadian clock to a new time zone as quickly as possible. How users adjust their behavior when provided with these optimal schedules remains an open question. Here, we reportmore »data collected by wearables from more than 100 travelers as they cross time zones using a smartphone app, Entrain . We find that people rarely follow the optimal schedules generated through mathematical modeling entirely, but travelers who better followed the optimal schedules reported more positive moods after their trips. Using the data collected, we improve the optimal schedule predictions to accommodate real-world constraints. We also develop a scheduling algorithm that allows for the computation of approximately optimal schedules "on-the-fly" in response to disruptions. User burnout may not be critically important as long as the first parts of a schedule are followed. These results represent a crucial improvement in making the theoretical results of past work viable for practical use and show how theoretical predictions based on known human physiology can be efficiently used in real-world settings.« less