Targeted Black-Box Side-Channel Mitigation for IoT✱

• DOI: 10.1145/3567445.3567447
• Publication Date: 2023-01-06T04:40:48Z
• Authors: Ismet Burak Kadron; Chaofan Shou; Emily O'Mahony; Yilmaz Vural; Tevfik Bultan
• Keywords: Information leakage; Leakage (economics)

In this paper we present techniques for generating targeted mitigation strategies network side-channel vulnerabilities in IoT applications. Our tool IoTPatch profiles the target application by capturing traffic and labeling traces with corresponding user actions. It extracts features such as packet sizes times from captured traces, quantifies information leakage modeling distribution of feature values. order to mitigate vulnerabilities, uses measure over prioritize specific synthesizes a padding delaying strategy based on an objective function minimizing time space overhead. provides tunable where trade-off between performance overhead can be adjusted accommodate needs different We evaluate three benchmarks demonstrate that discover quantify synthesize set Pareto optimal performing better than prior work terms reducing