all InfoSec news
OblivIO: Securing reactive programs by oblivious execution with bounded traffic overheads. (arXiv:2301.08148v1 [cs.CR])
cs.CR updates on arXiv.org arxiv.org
Traffic analysis attacks remain a significant problem for online security.
Communication between nodes can be observed by network level attackers as it
inherently takes place in the open. Despite online services increasingly using
encrypted traffic, the shape of the traffic is not hidden. To prevent traffic
analysis, the shape of a system's traffic must be independent of secrets. We
investigate adapting the data-oblivious approach the reactive setting and
present OblivIO, a secure language for writing reactive programs driven by
network …
analysis attackers attacks communication data encrypted encrypted traffic hidden network nodes oblivious online security online services problem secrets security services system traffic traffic analysis