Making programs forget: enforcing lifetime for sensitive data

Authors:
Jayanthkumar Kannan;Gautam Altekar;Petros Maniatis;Byung-Gon Chun
Affiliations:
Google Inc.;UC, Berkeley;Intel Labs Berkeley;Intel Labs Berkeley
Venue:
HotOS'13 Proceedings of the 13th USENIX conference on Hot topics in operating systems
Year:
2011

Citing 10
Cited 1

File System Design with Assured Delete

SISW '05 Proceedings of the Third IEEE International Security in Storage Workshop
Microreboot — A technique for cheap recovery

OSDI'04 Proceedings of the 6th conference on Symposium on Opearting Systems Design & Implementation - Volume 6
Using magpie for request extraction and workload modelling

OSDI'04 Proceedings of the 6th conference on Symposium on Opearting Systems Design & Implementation - Volume 6
Understanding data lifetime via whole system simulation

SSYM'04 Proceedings of the 13th conference on USENIX Security Symposium - Volume 13
Shredding your garbage: reducing data lifetime through secure deallocation

SSYM'05 Proceedings of the 14th conference on USENIX Security Symposium - Volume 14
Better bug reporting with better privacy

Proceedings of the 13th international conference on Architectural support for programming languages and operating systems
ODR: output-deterministic replay for multicore debugging

Proceedings of the ACM SIGOPS 22nd symposium on Operating systems principles
Protecting confidential data on personal computers with storage capsules

SSYM'09 Proceedings of the 18th conference on USENIX security symposium
Intrusion recovery using selective re-execution

OSDI'10 Proceedings of the 9th USENIX conference on Operating systems design and implementation
Tightlip: keeping applications from spilling the beans

NSDI'07 Proceedings of the 4th USENIX conference on Networked systems design & implementation

Eternal sunshine of the spotless machine: protecting privacy with ephemeral channels

OSDI'12 Proceedings of the 10th USENIX conference on Operating Systems Design and Implementation

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper introduces guaranteed data lifetime, a novel system property ensuring that sensitive data cannot be retrieved from a system beyond a specified time. The trivial way to achieve this is to "reboot"; however, this is disruptive from the user's perspective, and may not even eliminate disk copies. We discuss an alternate approach based on state re-incarnation where data expiry is completely transparent to the user, and can be used even if the system is not designed a priori to provide the property.