A novel side-channel in real-time schedulers

Chien Ying Chen, Sibin Mohan, Rodolfo Pellizzoni, Rakesh B. Bobba, Negar Kiyavash

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Abstract

We demonstrate the presence of a novel scheduler side-channel in preemptive, fixed-priority real-time systems (RTS); examples of such systems can be found in automotive systems, avionic systems, power plants and industrial control systems among others. This side-channel can leak important timing information such as the future arrival times of real-time tasks. This information can then be used to launch devastating attacks, two of which are demonstrated here (on real hardware platforms). Note that it is not easy to capture this timing information due to runtime variations in the schedules, the presence of multiple other tasks in the system and the typical constraints (e.g., deadlines) in the design of RTS. Our ScheduLeak algorithms demonstrate how to effectively exploit this side-channel. A complete implementation is presented on real operating systems (in Real-time Linux and FreeRTOS). Timing information leaked by ScheduLeak can significantly aid other, more advanced, attacks in better accomplishing their goals.

Original languageEnglish (US)
Title of host publicationProceedings - 25th IEEE Real-Time and Embedded Technology and Applications Symposium, RTAS 2019
EditorsBjorn B. Brandenburg
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages90-102
Number of pages13
ISBN (Electronic)9781728106786
DOIs
StatePublished - Apr 2019
Externally publishedYes
Event25th IEEE Real-Time and Embedded Technology and Applications Symposium, RTAS 2019 - Montreal, Canada
Duration: Apr 16 2019Apr 18 2019

Publication series

NameProceedings of the IEEE Real-Time and Embedded Technology and Applications Symposium, RTAS
Volume2019-April
ISSN (Print)1545-3421

Conference

Conference25th IEEE Real-Time and Embedded Technology and Applications Symposium, RTAS 2019
Country/TerritoryCanada
CityMontreal
Period4/16/194/18/19

Keywords

  • Arrival Time Inferences
  • Information Leakage
  • Real-Time Systems
  • ScheduLeak
  • Schedulers
  • Side-Channels

ASJC Scopus subject areas

  • General Engineering

Fingerprint

Dive into the research topics of 'A novel side-channel in real-time schedulers'. Together they form a unique fingerprint.

Cite this