vix.ing · top · new · best · stats · spec

Investigating Timing-Based Information Leakage in Data Flow-Driven Real-Time Systems

2025/05/18 by Mohammad Fakhruddin Babar, Zain A. H. Hammadeh, Babar, Mohammad Fakhruddin +5 · 1 voice
Computer Science · Engineering · #Distributed #Distributed systems and fault tolerance #FOS: Computer and information sciences #FOS: Electrical engineering #Parallel #Real-Time Systems Scheduling #Software System Performance and Reliability #Systems and Control (eess.SY) #and Cluster Computing (cs.DC) #cs.DC #eess.SY #electronic engineering #information engineering

paper · pdf · doi:10.48550/arxiv.2506.01991

openalex publication_date 2025/05/18 · arxiv published 2025/05/18 · arxiv updated 2025/06/04 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28

Abstract

Leaking information about the execution behavior of critical real-time tasks may lead to serious consequences, including violations of temporal constraints and even severe failures. We study information leakage for a special class of real-time tasks that have two execution modes, namely, typical execution (which invokes the majority of times) and critical execution (to tackle exceptional conditions). The data flow-driven applications inherit such a multimode execution model. In this paper, we investigate whether a low-priority "observer" task can infer the execution patterns of a high-priority "victim" task (especially the critical executions). We develop a new statistical analysis technique and show that by analyzing the response times of the low-priority task, it becomes possible to extract the execution behavior of the high-priority task. We test our approach against a random selection technique that arbitrarily classifies a job as critical. We find that correlating the observer's response times with the victim's jobs can result in higher precision in identifying critical invocations compared to a random guess. We conduct extensive evaluations with systemically generated workloads, including a case study using a UAV autopilot (ArduPilot) taskset parameters. We found that our inference algorithm can achieve relatively low false positive rates (less than 25%) with relatively low footprint (1 MB memory and 50 ms timing overhead on a Raspberry Pi 4 platform). We further demonstrate the feasibility of inference on two cyber-physical platforms: an off-the-shelf manufacturing robot and a custom-built surveillance system.

Citations

Discussions

Related