INFORMATION FLOW ENFORCEMENT FOR RISC-STYLE ASSEMBLY CODE IN THE PRESENCE OF TIMING-RELATED COVERT CHANNELS AND MULTI-THREADING

摘要

A method and apparatus is disclosed for performing information flow enforcement for assembly code. In one embodiment, the method comprises receiving assembly code having timing annotations with type information that enforce information flow with respect to one or more of timing-related covert and concurrent channels when statically checked as to whether the code is in violation of a security policy and performing verification with respect to information flow for the assembly code based on a security policy.