Classes 20 and 21: Java Security

Here are the slides from this week:

  • Class 20: Verifying Bytecodes [PPTX] [PDF]
  • Class 21: Hair-Dryer Attacks [PPTX] [PDF]

This is the paper I talked about in class today:

Sudhakar Govindavajhala and Andrew W. Appel, Using Memory Errors to Attack a Virtual Machine, IEEE Symposium on Security and Privacy (Oakland), 2003. [PDF"]

I think you should be able to understand almost everything in the paper from what we have done in class. Sudhakar also has some discussion about questions about the paper on his website: http://www.cs.princeton.edu/~sudhakar/papers/memerr-slashdot-commentary.html. It has better answers to some of the physics questions than I was able to give in class.

If you’re curious how much you should be worried about memory bit errors normally, you may be interested in this paper which analyzes the bit errors on Google’s servers over a 2.5 year period: DRAM Errors in the Wild: A Large-Scale Field Study by Bianca Schroeder, Eduardo Pinheiro, and Wolf-Dietrich Weber, SIGMETRICS 2009. (Short answer: if you don’t have as many machines as Google, you shouldn’t lose too much sleep over this.)

This entry was posted in Classes. Bookmark the permalink.

Comments are closed.