Protection against timing and resource consumption attacks
Systems and methods are provided for obscuring an amount of a resource used to process an item. In general, contemplated techniques comprise assigning a maximum allowable amount of the resource for processing a sub-part of the item. If the maximum allowable amount of the resource is reached, processing the sub-part may be terminated. Once all sub-parts are processed, a noisy quantity of the resource that was consumed in processing the item may be released. The noisy quantity is determined by adding a positive amount of the resource, combined with a noise value, to an actual quantity of the resource that was consumed.
1 . A method for obscuring an amount of time used to process a query, comprising:
assigning a maximum allowable time for processing a row;
releasing a query response at a time that is determined by adding a positive amount of time combined with a noise value to a total processing time.
2 . The method of claim 1 , wherein the noise value is a positive noise value.
3 . The method of claim 1 , wherein the noise value is a negative noise value.
4 . The method of claim 1 , wherein the positive amount of time is determined at least in part by evaluating a number of rows to which a query is directed.
5 . The method of claim 1 , wherein the positive amount of time is determined independently of the data in the row.
6 . The method of claim 1 , wherein if said maximum allowable time is met when processing a row, then processing said row is terminated.
7 . The method of claim 1 , wherein the noise value is selected from an exponential distribution.
8 . The method of claim 1 , wherein the total processing time is the actual amount of time used to process the query on all rows to which the query is directed.
9 . The method of claim 1 , wherein said method is carried out in a database comprising data associated with a plurality of privacy principals.
10 . The method of claim 1 , wherein the row comprises a password that is used to access a computing resource.
11 . A method for obscuring an amount of a resource used to process an item, comprising:
assigning a allowable amount of the resource for processing a sub-part of the item;
releasing a noisy quantity of the resource that was consumed in processing the item, wherein said noisy quantity is determined by adding a positive amount of the resource combined with a noise value to an actual quantity of the resource that was consumed.
12 . The method of claim 11 , wherein the resource is time.
13 . The method of claim 11 , wherein the resource is electrical energy.
14 . The method of claim 11 , wherein the item is a database query, and the sub-part of the item is a row in a database.
15 . The method of claim 11 , wherein the positive amount of the resource is determined at least in part by evaluating a number of sub-parts of the item that were processed.
16 . The method of claim 11 , wherein the noise value is selected from an exponential distribution.
17 . A system that obscures an amount of a resource used to process an item, comprising:
a system monitor that ensures a maximum allowable amount of the resource is not exceeded when processing a sub-part of the item;
a mechanism for calculating a noisy quantity of the resource that was consumed in processing the item, wherein said quantity is determined by adding a positive amount of the resource combined with a noise value to an actual quantity of the resource that was consumed.
18 . The system of claim 17 , wherein the resource is time.
19 . The system of claim 17 , wherein the resource is electrical energy.
20 . The system of claim 17 , wherein the noise value is selected from an exponential distribution.