2026-10-13T05:48:31Zhttps://www.radar-service.eu/oai/OAIHandler10.35097/12282026-10-09T10:56:09Zradar4kit
https://dx.doi.org/10.35097/1228
Hecker, Martin
Implementations of Algorithms from the Thesis "Timing Sensitive Dependency Analysis and its Application to Software Security"
Karlsruhe Institute of Technology
2023
Computer Science
dataset
Dataset
info:eu-repo/semantics/openAccess
https://creativecommons.org/licenses/by-nc-nd/4.0/legalcode
Hecker, Martin
In der Dissertation "Timing Sensitive Dependency Analysis and its Application to Software Security" präsentiere ich neue Verfahren zur statischen Analyse von Ausführungszeit-sensitiver Informationsflusskontrolle in Softwaresystemen. Ich wende diese Verfahren an zur Analyse nebenläufiger Java-Programme, sowie zur Analyse von Ausführungszeit-Seitenkanälen in Implementierungen kryptographischer Primitive.
In diesem VirtualBox Maschinen-Abbild stelle ich Implementierungen aller neuen Algorithmen dieser Dissertation bereit, zusammen mit randomisierten Test-Eigenschaften für alle formalen Observationen der Dissertation.
In my thesis "Timing Sensitive Dependency Analysis and its Application to Software Security", I present new methods for the static analysis of timing sensitive information flow control in software systems. I apply these methods in the analysis of concurrent Java programs, as well as the analysis of timing side-channels in implementations of cryptographic primitives.
In this VirtualBox machine image, I provide Implementations for all new Algorithms of my thesis, and randomized test properties for all formal Observations in the thesis.
This is the artifact corresponding to the thesis
"Timing Sensitive Dependency Analysis and its Application to Software Security" by Martin Hecker
The Virtual Box virtual machine image
```dissertation-vm```
can be used by logging in via
user: ```hecker```
password: ```hecker```
In the users home directory, you will find in
* ```randomized-tests.git/```
— in the language Haskell — both implementations of the submission's algorithms, and randomized tests that verify the submission's Observations.
* ```randomized-tests.git/src/test/Program/Properties/DissObservations.hs```
contains the randomized tests corresponding to the dissertations Observations.
The results can be reproduces within the virtual machine image by help of the provided shell runners. From the users home directory, run
* ```./randomized-tests```
to once run all randomized tests except those marked 'slow', which are randomized tests that may run several minutes some randomized inputs.
* ```./randomized-tests-slow```
to once run all those randomized tests marked 'slow'.
* ```./randomized-tests-forever``` or ```./randomized-tests-slow-forever```
to run the randomized tests forever, only terminating if there was found a counter-example to the submission's Observations.
information flow control
timing side channel
static analysis
algorithms
non-interference
low-security observational determinism
Hecker, Martin
10.5445/IR/1000122605
KITopen-DOI
application/x-tar