-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
34 changed files
with
583 additions
and
7 deletions.
There are no files selected for viewing
Empty file.
Large diffs are not rendered by default.
Oops, something went wrong.
Large diffs are not rendered by default.
Oops, something went wrong.
Large diffs are not rendered by default.
Oops, something went wrong.
24 changes: 24 additions & 0 deletions
24
tiddly/output/static/AddressSanitizer%3A%20A%20fast%20address%20sanity%20checker.html
Large diffs are not rendered by default.
Oops, something went wrong.
Large diffs are not rendered by default.
Oops, something went wrong.
24 changes: 24 additions & 0 deletions
24
tiddly/output/static/Attack%20in%20Compositional%20AI%20Systems.html
Large diffs are not rendered by default.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,30 @@ | ||
| <!doctype html> | ||
| <html> | ||
| <head> | ||
| <meta http-equiv="Content-Type" content="text/html;charset=utf-8" /> | ||
| <meta name="generator" content="TiddlyWiki" /> | ||
| <meta name="tiddlywiki-version" content="5.3.3" /> | ||
| <meta name="viewport" content="width=device-width, initial-scale=1.0" /> | ||
| <meta name="apple-mobile-web-app-capable" content="yes" /> | ||
| <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" /> | ||
| <meta name="mobile-web-app-capable" content="yes"/> | ||
| <meta name="format-detection" content="telephone=no"> | ||
| <link id="faviconLink" rel="shortcut icon" href="favicon.ico"> | ||
| <link rel="stylesheet" href="static.css"> | ||
| <title>CC Guest GPU VM Setup: ya0guang's notebook — Personality Backup</title> | ||
| </head> | ||
| <body class="tc-body"> | ||
|
|
||
| <section class="tc-story-river tc-static-story-river"> | ||
| <p><div class="tc-tiddler-frame tc-tiddler-view-frame tc-tiddler-exists tc-tagged-System tc-tagged-Linux" data-tags="System Linux" data-tiddler-title="CC Guest GPU VM Setup" role="article"><div class="tc-tiddler-title"><div class="tc-titlebar"><span class="tc-tiddler-controls"><button aria-expanded="false" aria-label="more" class="tc-btn-invisible tc-btn-%24%3A%2Fcore%2Fui%2FButtons%2Fmore-tiddler-actions" title="More actions"></button><div class=" tc-reveal" hidden="true"></div><button aria-label="edit" class="tc-btn-invisible tc-btn-%24%3A%2Fcore%2Fui%2FButtons%2Fedit" title="Edit this tiddler"></button><button aria-label="close" class="tc-btn-invisible tc-btn-%24%3A%2Fcore%2Fui%2FButtons%2Fclose" title="Close this tiddler"></button></span><span><h2 class="tc-title">CC Guest GPU VM Setup</h2></span></div><div class="tc-tiddler-info tc-popup-handle tc-reveal" hidden="true"></div></div><div class="tc-reveal"></div><div class=" tc-reveal"><div class="tc-subtitle"><a class="tc-tiddlylink tc-tiddlylink-missing" href=".html"></a> October 1, 2024 at 4:33 pm</div></div><div class=" tc-reveal"><div class="tc-tags-wrapper"><span class="tc-tag-list-item" data-tag-title="Linux"><span aria-expanded="false" class="tc-tag-label tc-btn-invisible" draggable="true" style="fill:rgb(38, 38, 38);color:rgb(38, 38, 38);">Linux</span><span class="tc-drop-down tc-reveal" hidden="true"></span></span><span class="tc-tag-list-item" data-tag-title="System"><span aria-expanded="false" class="tc-tag-label tc-btn-invisible" draggable="true" style="fill:rgb(38, 38, 38);color:rgb(38, 38, 38);">System</span><span class="tc-drop-down tc-reveal" hidden="true"></span></span></div></div><div class="tc-tiddler-body tc-reveal"><h1 class="">After Reboot</h1><pre class="hljs"><code class="sh hljs"><span class="hljs-comment"># On Host</span> | ||
| sudo modprobe vfio-pci | ||
| sudo sh -c <span class="hljs-string">"echo 10de 2331 > /sys/bus/pci/drivers/vfio-pci/new_id"</span> | ||
| <span class="hljs-comment"># Optionally </span> | ||
| sudo python3 ./nvidia_gpu_tools.py --gpu-name=H100 --set-cc-mode=devtools --reset-after-cc-mode-switch | ||
| <span class="hljs-comment"># Launch VM; In VM</span> | ||
| sudo nvidia-smi conf-compute -srs 1</code></pre></div> | ||
| </div></p> | ||
| </section> | ||
| </body> | ||
| </html> | ||
|
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,24 @@ | ||
| <!doctype html> | ||
| <html> | ||
| <head> | ||
| <meta http-equiv="Content-Type" content="text/html;charset=utf-8" /> | ||
| <meta name="generator" content="TiddlyWiki" /> | ||
| <meta name="tiddlywiki-version" content="5.3.3" /> | ||
| <meta name="viewport" content="width=device-width, initial-scale=1.0" /> | ||
| <meta name="apple-mobile-web-app-capable" content="yes" /> | ||
| <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" /> | ||
| <meta name="mobile-web-app-capable" content="yes"/> | ||
| <meta name="format-detection" content="telephone=no"> | ||
| <link id="faviconLink" rel="shortcut icon" href="favicon.ico"> | ||
| <link rel="stylesheet" href="static.css"> | ||
| <title>Evaluating Fuzz Testing: ya0guang's notebook — Personality Backup</title> | ||
| </head> | ||
| <body class="tc-body"> | ||
|
|
||
| <section class="tc-story-river tc-static-story-river"> | ||
| <p><div class="tc-tiddler-frame tc-tiddler-view-frame tc-tiddler-exists tc-tagged-Paper" data-tags="Paper" data-tiddler-title="Evaluating Fuzz Testing" role="article"><div class="tc-tiddler-title"><div class="tc-titlebar"><span class="tc-tiddler-controls"><button aria-expanded="false" aria-label="more" class="tc-btn-invisible tc-btn-%24%3A%2Fcore%2Fui%2FButtons%2Fmore-tiddler-actions" title="More actions"></button><div class=" tc-reveal" hidden="true"></div><button aria-label="edit" class="tc-btn-invisible tc-btn-%24%3A%2Fcore%2Fui%2FButtons%2Fedit" title="Edit this tiddler"></button><button aria-label="close" class="tc-btn-invisible tc-btn-%24%3A%2Fcore%2Fui%2FButtons%2Fclose" title="Close this tiddler"></button></span><span><h2 class="tc-title">Evaluating Fuzz Testing</h2></span></div><div class="tc-tiddler-info tc-popup-handle tc-reveal" hidden="true"></div></div><div class="tc-reveal"></div><div class=" tc-reveal"><div class="tc-subtitle"><a class="tc-tiddlylink tc-tiddlylink-missing" href=".html"></a> October 3, 2024 at 6:11 pm</div></div><div class=" tc-reveal"><div class="tc-tags-wrapper"><span class="tc-tag-list-item" data-tag-title="Paper"><span aria-expanded="false" class="tc-tag-label tc-btn-invisible" draggable="true" style="fill:rgb(38, 38, 38);color:rgb(38, 38, 38);">Paper</span><span class="tc-drop-down tc-reveal" hidden="true"></span></span></div></div><div class="tc-tiddler-body tc-reveal"><h1 class="">Abstract</h1><p>Fuzz testing has enjoyed great success at discovering security critical bugs in real software. Recently, researchers have devoted significant effort to devising new fuzzing techniques, strategies, and algorithms. Such new ideas are primarily evaluated experimentally so an important question is: What experimental setup is needed to produce trustworthy results? We surveyed the recent research literature and assessed the experimental evaluations carried out by 32 fuzzing papers. We found problems in every evaluation we considered. We then performed our own extensive experimental evaluation using an existing fuzzer. Our results showed that the general problems we found in existing experimental evaluations can indeed translate to actual wrong or misleading assessments. We conclude with some guidelines that we hope will help improve experimental evaluations of fuzz testing algorithms, making reported results more robust.</p><ul><li><a class="tc-tiddlylink-external" href="https://dl.acm.org/doi/10.1145/3243734.3243804" rel="noopener noreferrer" target="_blank">Paper</a></li></ul><p>This is a very interesting paper. It points out some "unscientific" aspects in fuzzing, including:</p><ul><li>Not unified test suite and various fuzzing targets (also different versions)</li><li>Important factors like execution time and seed selection</li></ul><p>They suggest using more statistical methodology (e.g., statistical tests) to support one fuzzer beats another.</p><ul><li>Interestingly, there is a new SoK paper in 2024 discussing this similar topic: <a class="tc-tiddlylink-external" href="https://ieeexplore.ieee.org/abstract/document/10646824" rel="noopener noreferrer" target="_blank">SoK: Prudent Evaluation Practices for Fuzzing</a>.</li></ul></div> | ||
| </div></p> | ||
| </section> | ||
| </body> | ||
| </html> | ||
|
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,24 @@ | ||
| <!doctype html> | ||
| <html> | ||
| <head> | ||
| <meta http-equiv="Content-Type" content="text/html;charset=utf-8" /> | ||
| <meta name="generator" content="TiddlyWiki" /> | ||
| <meta name="tiddlywiki-version" content="5.3.3" /> | ||
| <meta name="viewport" content="width=device-width, initial-scale=1.0" /> | ||
| <meta name="apple-mobile-web-app-capable" content="yes" /> | ||
| <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" /> | ||
| <meta name="mobile-web-app-capable" content="yes"/> | ||
| <meta name="format-detection" content="telephone=no"> | ||
| <link id="faviconLink" rel="shortcut icon" href="favicon.ico"> | ||
| <link rel="stylesheet" href="static.css"> | ||
| <title>Industry Connecting: ya0guang's notebook — Personality Backup</title> | ||
| </head> | ||
| <body class="tc-body"> | ||
|
|
||
| <section class="tc-story-river tc-static-story-river"> | ||
| <p><div class="tc-tiddler-frame tc-tiddler-view-frame tc-tiddler-exists tc-tagged-Career" data-tags="Career" data-tiddler-title="Industry Connecting" role="article"><div class="tc-tiddler-title"><div class="tc-titlebar"><span class="tc-tiddler-controls"><button aria-expanded="false" aria-label="more" class="tc-btn-invisible tc-btn-%24%3A%2Fcore%2Fui%2FButtons%2Fmore-tiddler-actions" title="More actions"></button><div class=" tc-reveal" hidden="true"></div><button aria-label="edit" class="tc-btn-invisible tc-btn-%24%3A%2Fcore%2Fui%2FButtons%2Fedit" title="Edit this tiddler"></button><button aria-label="close" class="tc-btn-invisible tc-btn-%24%3A%2Fcore%2Fui%2FButtons%2Fclose" title="Close this tiddler"></button></span><span><h2 class="tc-title">Industry Connecting</h2></span></div><div class="tc-tiddler-info tc-popup-handle tc-reveal" hidden="true"></div></div><div class="tc-reveal"></div><div class=" tc-reveal"><div class="tc-subtitle"><a class="tc-tiddlylink tc-tiddlylink-missing" href=".html"></a> September 17, 2024 at 4:59 pm</div></div><div class=" tc-reveal"><div class="tc-tags-wrapper"><span class="tc-tag-list-item" data-tag-title="Career"><span aria-expanded="false" class="tc-tag-label tc-btn-invisible" draggable="true" style="fill:rgb(38, 38, 38);color:rgb(38, 38, 38);">Career</span><span class="tc-drop-down tc-reveal" hidden="true"></span></span></div></div><div class="tc-tiddler-body tc-reveal"><p>check this.</p></div> | ||
| </div></p> | ||
| </section> | ||
| </body> | ||
| </html> | ||
|
|
26 changes: 26 additions & 0 deletions
26
...c/Information%20Flow%20Tracking%20for%20Heterogeneous%20Compartmentalized%20Software.html
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,26 @@ | ||
| <!doctype html> | ||
| <html> | ||
| <head> | ||
| <meta http-equiv="Content-Type" content="text/html;charset=utf-8" /> | ||
| <meta name="generator" content="TiddlyWiki" /> | ||
| <meta name="tiddlywiki-version" content="5.3.3" /> | ||
| <meta name="viewport" content="width=device-width, initial-scale=1.0" /> | ||
| <meta name="apple-mobile-web-app-capable" content="yes" /> | ||
| <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" /> | ||
| <meta name="mobile-web-app-capable" content="yes"/> | ||
| <meta name="format-detection" content="telephone=no"> | ||
| <link id="faviconLink" rel="shortcut icon" href="favicon.ico"> | ||
| <link rel="stylesheet" href="static.css"> | ||
| <title>Information Flow Tracking for Heterogeneous Compartmentalized Software: ya0guang's notebook — Personality Backup</title> | ||
| </head> | ||
| <body class="tc-body"> | ||
|
|
||
| <section class="tc-story-river tc-static-story-river"> | ||
| <p><div class="tc-tiddler-frame tc-tiddler-view-frame tc-tiddler-exists tc-tagged-Paper tc-tagged-System tc-tagged-IFC" data-tags="Paper System IFC" data-tiddler-title="Information Flow Tracking for Heterogeneous Compartmentalized Software" role="article"><div class="tc-tiddler-title"><div class="tc-titlebar"><span class="tc-tiddler-controls"><button aria-expanded="false" aria-label="more" class="tc-btn-invisible tc-btn-%24%3A%2Fcore%2Fui%2FButtons%2Fmore-tiddler-actions" title="More actions"></button><div class=" tc-reveal" hidden="true"></div><button aria-label="edit" class="tc-btn-invisible tc-btn-%24%3A%2Fcore%2Fui%2FButtons%2Fedit" title="Edit this tiddler"></button><button aria-label="close" class="tc-btn-invisible tc-btn-%24%3A%2Fcore%2Fui%2FButtons%2Fclose" title="Close this tiddler"></button></span><span><h2 class="tc-title">Information Flow Tracking for Heterogeneous Compartmentalized Software</h2></span></div><div class="tc-tiddler-info tc-popup-handle tc-reveal" hidden="true"></div></div><div class="tc-reveal"></div><div class=" tc-reveal"><div class="tc-subtitle"><a class="tc-tiddlylink tc-tiddlylink-missing" href=".html"></a> September 19, 2024 at 3:37 pm</div></div><div class=" tc-reveal"><div class="tc-tags-wrapper"><span class="tc-tag-list-item" data-tag-title="IFC"><span aria-expanded="false" class="tc-tag-label tc-btn-invisible" draggable="true" style="fill:rgb(38, 38, 38);color:rgb(38, 38, 38);">IFC</span><span class="tc-drop-down tc-reveal" hidden="true"></span></span><span class="tc-tag-list-item" data-tag-title="Paper"><span aria-expanded="false" class="tc-tag-label tc-btn-invisible" draggable="true" style="fill:rgb(38, 38, 38);color:rgb(38, 38, 38);">Paper</span><span class="tc-drop-down tc-reveal" hidden="true"></span></span><span class="tc-tag-list-item" data-tag-title="System"><span aria-expanded="false" class="tc-tag-label tc-btn-invisible" draggable="true" style="fill:rgb(38, 38, 38);color:rgb(38, 38, 38);">System</span><span class="tc-drop-down tc-reveal" hidden="true"></span></span></div></div><div class="tc-tiddler-body tc-reveal"><ul><li><a class="tc-tiddlylink-external" href="https://dl.acm.org/doi/10.1145/3607199.3607235" rel="noopener noreferrer" target="_blank">Paper</a></li></ul><h1 class="">Abstract</h1><p>We are now seeing increased hardware support for improving the security and performance of privilege separation and compartmentalization techniques. Today, developers can benefit from multiple compartmentalization mechanisms such as process-based sandboxes, trusted execution environments (TEEs)/enclaves, and even intra-address space compartments (i.e., intra-process or intra-enclave). We dub such a computing model a “hetero-compartment” environment and observe that existing system stacks still assume single-compartment models (i.e., user space processes), leading to limitations in using, integrating, and monitoring heterogeneous compartments from a security and performance perspective. | ||
| We introduce Deluminator, a set of OS abstractions and a userspace framework to enable extensible and fine-grained information flow tracking in hetero-compartment environments. Deluminator allows developers to securely use and combine compartments, define security policies over shared system resources, and audit policy violations and perform digital forensics across heterogeneous compartments. We implemented Deluminator on Linux-based ARM and x86-64 platforms, which supports diverse compartment types ranging from processes, SGX enclaves, TrustZone Trusted Apps (TAs), and intra-address space compartments. Our evaluation shows that our kernel and hardware-assisted approach results in a reasonable overhead (on average 7-29%) that makes it suitable for real-world applications. | ||
| </p></div> | ||
| </div></p> | ||
| </section> | ||
| </body> | ||
| </html> | ||
|
|
24 changes: 24 additions & 0 deletions
24
...Learning%20with%20Confidential%20Computing%3A%20A%20Systematization%20of%20Knowledge.html
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,24 @@ | ||
| <!doctype html> | ||
| <html> | ||
| <head> | ||
| <meta http-equiv="Content-Type" content="text/html;charset=utf-8" /> | ||
| <meta name="generator" content="TiddlyWiki" /> | ||
| <meta name="tiddlywiki-version" content="5.3.3" /> | ||
| <meta name="viewport" content="width=device-width, initial-scale=1.0" /> | ||
| <meta name="apple-mobile-web-app-capable" content="yes" /> | ||
| <meta name="apple-mobile-web-app-status-bar-style" content="black-translucent" /> | ||
| <meta name="mobile-web-app-capable" content="yes"/> | ||
| <meta name="format-detection" content="telephone=no"> | ||
| <link id="faviconLink" rel="shortcut icon" href="favicon.ico"> | ||
| <link rel="stylesheet" href="static.css"> | ||
| <title>Machine Learning with Confidential Computing: A Systematization of Knowledge: ya0guang's notebook — Personality Backup</title> | ||
| </head> | ||
| <body class="tc-body"> | ||
|
|
||
| <section class="tc-story-river tc-static-story-river"> | ||
| <p><div class="tc-tiddler-frame tc-tiddler-view-frame tc-tiddler-exists tc-tagged-Paper tc-tagged-SGX tc-tagged-SEV tc-tagged-TDX tc-tagged-System tc-tagged-AI tc-tagged-GPUTEE" data-tags="Paper SGX SEV TDX System AI GPUTEE" data-tiddler-title="Machine Learning with Confidential Computing: A Systematization of Knowledge" role="article"><div class="tc-tiddler-title"><div class="tc-titlebar"><span class="tc-tiddler-controls"><button aria-expanded="false" aria-label="more" class="tc-btn-invisible tc-btn-%24%3A%2Fcore%2Fui%2FButtons%2Fmore-tiddler-actions" title="More actions"></button><div class=" tc-reveal" hidden="true"></div><button aria-label="edit" class="tc-btn-invisible tc-btn-%24%3A%2Fcore%2Fui%2FButtons%2Fedit" title="Edit this tiddler"></button><button aria-label="close" class="tc-btn-invisible tc-btn-%24%3A%2Fcore%2Fui%2FButtons%2Fclose" title="Close this tiddler"></button></span><span><h2 class="tc-title">Machine Learning with Confidential Computing: A Systematization of Knowledge</h2></span></div><div class="tc-tiddler-info tc-popup-handle tc-reveal" hidden="true"></div></div><div class="tc-reveal"></div><div class=" tc-reveal"><div class="tc-subtitle"><a class="tc-tiddlylink tc-tiddlylink-missing" href=".html"></a> September 17, 2024 at 5:03 pm</div></div><div class=" tc-reveal"><div class="tc-tags-wrapper"><span class="tc-tag-list-item" data-tag-title="AI"><span aria-expanded="false" class="tc-tag-label tc-btn-invisible" draggable="true" style="fill:rgb(38, 38, 38);color:rgb(38, 38, 38);">AI</span><span class="tc-drop-down tc-reveal" hidden="true"></span></span><span class="tc-tag-list-item" data-tag-title="GPUTEE"><span aria-expanded="false" class="tc-tag-label tc-btn-invisible" draggable="true" style="fill:rgb(38, 38, 38);color:rgb(38, 38, 38);">GPUTEE</span><span class="tc-drop-down tc-reveal" hidden="true"></span></span><span class="tc-tag-list-item" data-tag-title="Paper"><span aria-expanded="false" class="tc-tag-label tc-btn-invisible" draggable="true" style="fill:rgb(38, 38, 38);color:rgb(38, 38, 38);">Paper</span><span class="tc-drop-down tc-reveal" hidden="true"></span></span><span class="tc-tag-list-item" data-tag-title="SEV"><span aria-expanded="false" class="tc-tag-label tc-btn-invisible" draggable="true" style="fill:rgb(38, 38, 38);color:rgb(38, 38, 38);">SEV</span><span class="tc-drop-down tc-reveal" hidden="true"></span></span><span class="tc-tag-list-item" data-tag-title="SGX"><span aria-expanded="false" class="tc-tag-label tc-btn-invisible" draggable="true" style="fill:rgb(38, 38, 38);color:rgb(38, 38, 38);">SGX</span><span class="tc-drop-down tc-reveal" hidden="true"></span></span><span class="tc-tag-list-item" data-tag-title="System"><span aria-expanded="false" class="tc-tag-label tc-btn-invisible" draggable="true" style="fill:rgb(38, 38, 38);color:rgb(38, 38, 38);">System</span><span class="tc-drop-down tc-reveal" hidden="true"></span></span><span class="tc-tag-list-item" data-tag-title="TDX"><span aria-expanded="false" class="tc-tag-label tc-btn-invisible" draggable="true" style="fill:rgb(38, 38, 38);color:rgb(38, 38, 38);">TDX</span><span class="tc-drop-down tc-reveal" hidden="true"></span></span></div></div><div class="tc-tiddler-body tc-reveal"><p>This is an interesting work.</p><p>The idea of GPU record and replay combining with TEE can be trace back to 2021 from an arxiv paper: <a class="tc-tiddlylink-external" href="https://arxiv.org/pdf/2111.03065" rel="noopener noreferrer" target="_blank">Safe and Practical GPU Acceleration in TrustZone</a>. This should be the arxiv version of the ASPLOS'22 paper <a class="tc-tiddlylink-external" href="https://dl.acm.org/doi/abs/10.1145/3503222.3507754" rel="noopener noreferrer" target="_blank">GPUReplay: a 50-KB GPU stack for client ML</a>.</p></div> | ||
| </div></p> | ||
| </section> | ||
| </body> | ||
| </html> | ||
|
|
Large diffs are not rendered by default.
Oops, something went wrong.
Oops, something went wrong.