The Experts below are selected from a list of 31968 Experts worldwide ranked by ideXlab platform
Iona Cheng - One of the best experts on this subject based on the ideXlab platform.
-
the influence of neighborhood socioeconomic status and ethnic Enclave on endometrial cancer mortality among hispanics and asian americans pacific islanders in california
Cancer Causes & Control, 2018Co-Authors: Scarlett Li Gomez, Julie Von Behre, Renata Abrahao, Debbie Goldberg, Veronica Wendy Setiawa, Iona ChengAbstract:PURPOSE We investigated the role of neighborhood socioeconomic status (nSES) and residence in ethnic Enclaves on mortality following endometrial cancer (EC) diagnosis among Hispanics and Asian Americans/Pacific Islanders (AAPI). METHODS Using California Cancer Registry data, enhanced with census block group information on ethnic Enclave and nSES, we examined 9,367 Hispanics and 5,878 AAPIs diagnosed with EC from 1988 to 2011. Cox proportional hazard models were used to estimate associations between all-cause and EC-specific mortality with nSES and ethnic Enclaves, adjusting for subject sociodemographic and tumor characteristics. RESULTS Hispanics in the lowest SES neighborhoods had a 39% and 36% increased risk of all-cause and EC-specific mortality, respectively, compared to Hispanics in the highest SES neighborhoods. AAPIs in the lowest SES neighborhoods had a 37% increased risk of all-cause mortality compared to AAPIs in the highest SES neighborhoods. Living in an ethnic Enclave was associated with lower all-cause mortality risk for AAPIs. CONCLUSIONS Mortality risk varied by nSES and ethnic Enclave among Hispanics and AAPIs. Women living in lower SES communities experienced significantly higher risk, highlighting the need to identify the specific neighborhood factors underlying these associations so that community-based interventions may be properly targeted.
-
the influence of neighborhood socioeconomic status and ethnic Enclave on endometrial cancer mortality among hispanics and asian americans pacific islanders in california
Cancer Causes & Control, 2018Co-Authors: Renata Abrahao, Debbie Goldberg, Iona Cheng, Scarlett Lin Gomez, Julie Von Behren, Veronica Wendy SetiawanAbstract:We investigated the role of neighborhood socioeconomic status (nSES) and residence in ethnic Enclaves on mortality following endometrial cancer (EC) diagnosis among Hispanics and Asian Americans/Pacific Islanders (AAPI). Using California Cancer Registry data, enhanced with census block group information on ethnic Enclave and nSES, we examined 9,367 Hispanics and 5,878 AAPIs diagnosed with EC from 1988 to 2011. Cox proportional hazard models were used to estimate associations between all-cause and EC-specific mortality with nSES and ethnic Enclaves, adjusting for subject sociodemographic and tumor characteristics. Hispanics in the lowest SES neighborhoods had a 39% and 36% increased risk of all-cause and EC-specific mortality, respectively, compared to Hispanics in the highest SES neighborhoods. AAPIs in the lowest SES neighborhoods had a 37% increased risk of all-cause mortality compared to AAPIs in the highest SES neighborhoods. Living in an ethnic Enclave was associated with lower all-cause mortality risk for AAPIs. Mortality risk varied by nSES and ethnic Enclave among Hispanics and AAPIs. Women living in lower SES communities experienced significantly higher risk, highlighting the need to identify the specific neighborhood factors underlying these associations so that community-based interventions may be properly targeted.
Debbie Goldberg - One of the best experts on this subject based on the ideXlab platform.
-
the influence of neighborhood socioeconomic status and ethnic Enclave on endometrial cancer mortality among hispanics and asian americans pacific islanders in california
Cancer Causes & Control, 2018Co-Authors: Scarlett Li Gomez, Julie Von Behre, Renata Abrahao, Debbie Goldberg, Veronica Wendy Setiawa, Iona ChengAbstract:PURPOSE We investigated the role of neighborhood socioeconomic status (nSES) and residence in ethnic Enclaves on mortality following endometrial cancer (EC) diagnosis among Hispanics and Asian Americans/Pacific Islanders (AAPI). METHODS Using California Cancer Registry data, enhanced with census block group information on ethnic Enclave and nSES, we examined 9,367 Hispanics and 5,878 AAPIs diagnosed with EC from 1988 to 2011. Cox proportional hazard models were used to estimate associations between all-cause and EC-specific mortality with nSES and ethnic Enclaves, adjusting for subject sociodemographic and tumor characteristics. RESULTS Hispanics in the lowest SES neighborhoods had a 39% and 36% increased risk of all-cause and EC-specific mortality, respectively, compared to Hispanics in the highest SES neighborhoods. AAPIs in the lowest SES neighborhoods had a 37% increased risk of all-cause mortality compared to AAPIs in the highest SES neighborhoods. Living in an ethnic Enclave was associated with lower all-cause mortality risk for AAPIs. CONCLUSIONS Mortality risk varied by nSES and ethnic Enclave among Hispanics and AAPIs. Women living in lower SES communities experienced significantly higher risk, highlighting the need to identify the specific neighborhood factors underlying these associations so that community-based interventions may be properly targeted.
-
the influence of neighborhood socioeconomic status and ethnic Enclave on endometrial cancer mortality among hispanics and asian americans pacific islanders in california
Cancer Causes & Control, 2018Co-Authors: Renata Abrahao, Debbie Goldberg, Iona Cheng, Scarlett Lin Gomez, Julie Von Behren, Veronica Wendy SetiawanAbstract:We investigated the role of neighborhood socioeconomic status (nSES) and residence in ethnic Enclaves on mortality following endometrial cancer (EC) diagnosis among Hispanics and Asian Americans/Pacific Islanders (AAPI). Using California Cancer Registry data, enhanced with census block group information on ethnic Enclave and nSES, we examined 9,367 Hispanics and 5,878 AAPIs diagnosed with EC from 1988 to 2011. Cox proportional hazard models were used to estimate associations between all-cause and EC-specific mortality with nSES and ethnic Enclaves, adjusting for subject sociodemographic and tumor characteristics. Hispanics in the lowest SES neighborhoods had a 39% and 36% increased risk of all-cause and EC-specific mortality, respectively, compared to Hispanics in the highest SES neighborhoods. AAPIs in the lowest SES neighborhoods had a 37% increased risk of all-cause mortality compared to AAPIs in the highest SES neighborhoods. Living in an ethnic Enclave was associated with lower all-cause mortality risk for AAPIs. Mortality risk varied by nSES and ethnic Enclave among Hispanics and AAPIs. Women living in lower SES communities experienced significantly higher risk, highlighting the need to identify the specific neighborhood factors underlying these associations so that community-based interventions may be properly targeted.
Frank Piessens - One of the best experts on this subject based on the ideXlab platform.
-
Provably Secure Isolation for Interruptible Enclaved Execution on Small Microprocessors: Extended Version.
arXiv: Cryptography and Security, 2020Co-Authors: Matteo Busi, Jo Van Bulck, Job Noorman, Letterio Galletta, Pierpaolo Degano, Jan Tobias Mühlberg, Frank PiessensAbstract:Computer systems often provide hardware support for isolation mechanisms like privilege levels, virtual memory, or Enclaved execution. Over the past years, several successful software-based side-channel attacks have been developed that break, or at least significantly weaken the isolation that these mechanisms offer. Extending a processor with new architectural or micro-architectural features, brings a risk of introducing new such side-channel attacks. This paper studies the problem of extending a processor with new features without weakening the security of the isolation mechanisms that the processor offers. We propose to use full abstraction as a formal criterion for the security of a processor extension, and we instantiate that criterion to the concrete case of extending a microprocessor that supports Enclaved execution with secure interruptibility of these Enclaves. This is a very relevant instantiation as several recent papers have shown that interruptibility of Enclaves leads to a variety of software-based side-channel attacks. We propose a design for interruptible Enclaves, and prove that it satisfies our security criterion. We also implement the design on an open-source Enclave-enabled microprocessor, and evaluate the cost of our design in terms of performance and hardware size.
-
CSF - Provably Secure Isolation for Interruptible Enclaved Execution on Small Microprocessors
2020 IEEE 33rd Computer Security Foundations Symposium (CSF), 2020Co-Authors: Matteo Busi, Jo Van Bulck, Job Noorman, Letterio Galletta, Pierpaolo Degano, Jan Tobias Mühlberg, Frank PiessensAbstract:Computer systems often provide hardware support for isolation mechanisms like privilege levels, virtual memory, or Enclaved execution. Over the past years, several successful software-based side-channel attacks have been developed that break, or at least significantly weaken the isolation that these mechanisms offer. Extending a processor with new architectural or micro-architectural features, brings a risk of introducing new such side-channel attacks. This paper studies the problem of extending a processor with new features without weakening the security of the isolation mechanisms that the processor offers. We propose to use full abstraction as a formal criterion for the security of a processor extension, and we instantiate that criterion to the concrete case of extending a microprocessor that supports Enclaved execution with secure interruptibility of these Enclaves. This is a very relevant instantiation as several recent papers have shown that interruptibility of Enclaves leads to a variety of software-based side-channel attacks. We propose a design for interruptible Enclaves, and prove that it satisfies our security criterion. We also implement the design on an open-source Enclave-enabled microprocessor, and evaluate the cost of our design in terms of performance and hardware size.
-
foreshadow extracting the keys to the intel sgx kingdom with transient out of order execution
USENIX Security Symposium, 2018Co-Authors: Jo Van Bulck, Marina Minkin, Ofir Weisse, Daniel Genkin, Baris Kasikci, Frank Piessens, Mark Silberstein, Thomas F Wenisch, Yuval Yarom, Raoul StrackxAbstract:Trusted execution environments, and particularly the Software Guard eXtensions (SGX) included in recent Intel x86 processors, gained significant traction in recent years. A long track of research papers, and increasingly also real-world industry applications, take advantage of the strong hardware-enforced confidentiality and integrity guarantees provided by Intel SGX. Ultimately, Enclaved execution holds the compelling potential of securely offloading sensitive computations to untrusted remote platforms. We present Foreshadow, a practical software-only microarchitectural attack that decisively dismantles the security objectives of current SGX implementations. Crucially, unlike previous SGX attacks, we do not make any assumptions on the victim Enclave's code and do not necessarily require kernel-level access. At its core, Foreshadow abuses a speculative execution bug in modern Intel processors, on top of which we develop a novel exploitation methodology to reliably leak plaintext Enclave secrets from the CPU cache. We demonstrate our attacks by extracting full cryptographic keys from Intel's vetted architectural Enclaves, and validate their correctness by launching rogue production Enclaves and forging arbitrary local and remote attestation responses. The extracted remote attestation keys affect millions of devices.
-
USENIX Security Symposium - Foreshadow: extracting the keys to the intel SGX kingdom with transient out-of-order execution
2018Co-Authors: Jo Van Bulck, Marina Minkin, Ofir Weisse, Daniel Genkin, Baris Kasikci, Frank Piessens, Mark Silberstein, Thomas F Wenisch, Yuval Yarom, Raoul StrackxAbstract:Trusted execution environments, and particularly the Software Guard eXtensions (SGX) included in recent Intel x86 processors, gained significant traction in recent years. A long track of research papers, and increasingly also real-world industry applications, take advantage of the strong hardware-enforced confidentiality and integrity guarantees provided by Intel SGX. Ultimately, Enclaved execution holds the compelling potential of securely offloading sensitive computations to untrusted remote platforms. We present Foreshadow, a practical software-only microarchitectural attack that decisively dismantles the security objectives of current SGX implementations. Crucially, unlike previous SGX attacks, we do not make any assumptions on the victim Enclave's code and do not necessarily require kernel-level access. At its core, Foreshadow abuses a speculative execution bug in modern Intel processors, on top of which we develop a novel exploitation methodology to reliably leak plaintext Enclave secrets from the CPU cache. We demonstrate our attacks by extracting full cryptographic keys from Intel's vetted architectural Enclaves, and validate their correctness by launching rogue production Enclaves and forging arbitrary local and remote attestation responses. The extracted remote attestation keys affect millions of devices.
-
ESSoS - Off-Limits: Abusing Legacy x86 Memory Segmentation to Spy on Enclaved Execution
Lecture Notes in Computer Science, 2018Co-Authors: Jago Gyselinck, Frank Piessens, Jo Van Bulck, Raoul StrackxAbstract:Enclaved execution environments, such as Intel SGX, enable secure, hardware-enforced isolated execution of critical application components without having to trust the underlying operating system or hypervisor. A recent line of research, however, explores innovative controlled-channel attacks mounted by untrusted system software to partially compromise the confidentiality of Enclave programs. Apart from exploiting relatively well-known side-channels like the CPU cache and branch predictor, these attacks have so far focused on tracking side-effects from Enclaved address translations via the paging unit.
Raoul Strackx - One of the best experts on this subject based on the ideXlab platform.
-
foreshadow extracting the keys to the intel sgx kingdom with transient out of order execution
USENIX Security Symposium, 2018Co-Authors: Jo Van Bulck, Marina Minkin, Ofir Weisse, Daniel Genkin, Baris Kasikci, Frank Piessens, Mark Silberstein, Thomas F Wenisch, Yuval Yarom, Raoul StrackxAbstract:Trusted execution environments, and particularly the Software Guard eXtensions (SGX) included in recent Intel x86 processors, gained significant traction in recent years. A long track of research papers, and increasingly also real-world industry applications, take advantage of the strong hardware-enforced confidentiality and integrity guarantees provided by Intel SGX. Ultimately, Enclaved execution holds the compelling potential of securely offloading sensitive computations to untrusted remote platforms. We present Foreshadow, a practical software-only microarchitectural attack that decisively dismantles the security objectives of current SGX implementations. Crucially, unlike previous SGX attacks, we do not make any assumptions on the victim Enclave's code and do not necessarily require kernel-level access. At its core, Foreshadow abuses a speculative execution bug in modern Intel processors, on top of which we develop a novel exploitation methodology to reliably leak plaintext Enclave secrets from the CPU cache. We demonstrate our attacks by extracting full cryptographic keys from Intel's vetted architectural Enclaves, and validate their correctness by launching rogue production Enclaves and forging arbitrary local and remote attestation responses. The extracted remote attestation keys affect millions of devices.
-
USENIX Security Symposium - Foreshadow: extracting the keys to the intel SGX kingdom with transient out-of-order execution
2018Co-Authors: Jo Van Bulck, Marina Minkin, Ofir Weisse, Daniel Genkin, Baris Kasikci, Frank Piessens, Mark Silberstein, Thomas F Wenisch, Yuval Yarom, Raoul StrackxAbstract:Trusted execution environments, and particularly the Software Guard eXtensions (SGX) included in recent Intel x86 processors, gained significant traction in recent years. A long track of research papers, and increasingly also real-world industry applications, take advantage of the strong hardware-enforced confidentiality and integrity guarantees provided by Intel SGX. Ultimately, Enclaved execution holds the compelling potential of securely offloading sensitive computations to untrusted remote platforms. We present Foreshadow, a practical software-only microarchitectural attack that decisively dismantles the security objectives of current SGX implementations. Crucially, unlike previous SGX attacks, we do not make any assumptions on the victim Enclave's code and do not necessarily require kernel-level access. At its core, Foreshadow abuses a speculative execution bug in modern Intel processors, on top of which we develop a novel exploitation methodology to reliably leak plaintext Enclave secrets from the CPU cache. We demonstrate our attacks by extracting full cryptographic keys from Intel's vetted architectural Enclaves, and validate their correctness by launching rogue production Enclaves and forging arbitrary local and remote attestation responses. The extracted remote attestation keys affect millions of devices.
-
ESSoS - Off-Limits: Abusing Legacy x86 Memory Segmentation to Spy on Enclaved Execution
Lecture Notes in Computer Science, 2018Co-Authors: Jago Gyselinck, Frank Piessens, Jo Van Bulck, Raoul StrackxAbstract:Enclaved execution environments, such as Intel SGX, enable secure, hardware-enforced isolated execution of critical application components without having to trust the underlying operating system or hypervisor. A recent line of research, however, explores innovative controlled-channel attacks mounted by untrusted system software to partially compromise the confidentiality of Enclave programs. Apart from exploiting relatively well-known side-channels like the CPU cache and branch predictor, these attacks have so far focused on tracking side-effects from Enclaved address translations via the paging unit.
-
USENIX Security Symposium - Telling your secrets without page faults: stealthy page table-based attacks on Enclaved execution
2017Co-Authors: Jo Van Bulck, Frank Piessens, Nico Weichbrodt, Rüdiger Kapitza, Raoul StrackxAbstract:Protected module architectures, such as Intel SGX, enable strong trusted computing guarantees for hardware-enforced Enclaves on top a potentially malicious operating system. However, such Enclaved execution environments are known to be vulnerable to a powerful class of controlled-channel attacks. Recent research convincingly demonstrated that adversarial system software can extract sensitive data from Enclaved applications by carefully revoking access rights on Enclave pages, and recording the associated page faults. As a response, a number of state-of-the-art defense techniques has been proposed that suppress page faults during Enclave execution. This paper shows, however, that page table-based threats go beyond page faults. We demonstrate that an untrusted operating system can observe Enclave page accesses without resorting to page faults, by exploiting other side-effects of the address translation process. We contribute two novel attack vectors that infer Enclaved memory accesses from page table attributes, as well as from the caching behavior of unprotected page table memory. We demonstrate the effectiveness of our attacks by recovering EdDSA session keys with little to no noise from the popular Libgcrypt cryptographic software suite.
-
Towards safe Enclaves
2016Co-Authors: Neline Van Ginkel, Raoul Strackx, Tobias Mühlberg, Frank PiessensAbstract:Protected module architectures, like the recently launched Intel Software Guard Extensions (Intel SGX), make it possible to protect individual software modules of an application against attacks from other modules of the application, or from the operating system. But if the code of the protected module (the Enclave in Intel SGX terminology) has vulnerabilities itself, that module can still be exploitable. Programming Enclaves in a safe programming language can prevent a wide range of vulnerabilities within the Enclave. However, the simple approach of programming Enclaves in a safe programming languages gives less security guarantees than one might expect. A safe language only provides safety guarantees for whole programs, not for individual modules that are part of a bigger program. If the context of the module is malicious, additional defensive measures are required to guarantee the safety of the Enclave. This paper illustrates this problem, and reports on work-in-progress towards a solution.
Scarlett Lin Gomez - One of the best experts on this subject based on the ideXlab platform.
-
nativity ethnic Enclave residence and breast cancer survival among latinas variations between california and texas
Cancer, 2020Co-Authors: Salma Shariffmarco, Scarlett Lin Gomez, Alison J Canchola, Hannah Fullington, Amy E Hughes, Hong Zhu, Sandi L PruittAbstract:Background Among Latinas with breast cancer, residence in an ethnic Enclave may be associated with survival. However, findings from prior studies are inconsistent. Methods The authors conducted parallel analyses of California and Texas cancer registry data for adult (aged ≥18 years) Latinas who were diagnosed with invasive breast cancer from 1996 to 2005, with follow-up through 2014. Existing indices applied to tract-level 2000 US Census data were used to measure Latinx Enclaves and neighborhood socioeconomic status (nSES). Multivariable Cox proportional hazard models were fit for all-cause and breast cancer-specific survival adjusted for year of diagnosis, patient age, nativity (with multiple imputation), tumor stage, histology, grade, size, and clustering by census tract. Results Among 38,858 Latinas, the majority (61.3% in California and 70.5% in Texas) lived in Enclaves. In fully adjusted models for both states, foreign-born women were found to be more likely to die of breast cancer and all causes when compared with US-born women. Living in Enclaves and in neighborhoods with higher SES were found to be independently associated with improved survival from both causes. When combined into a 4-level variable, those in low nSES nonEnclaves had worse survival for both causes compared with those living in low nSES Enclaves and, in the all-cause but not breast cancer-specific models, those in high nSES neighborhoods, regardless of Enclave status, had improved survival from all causes. Conclusions Applying the same methods across 2 states eliminated previously published inconsistent associations between Enclave residence and breast cancer survival. Future studies should identify specific protective effects of Enclave residence to inform interventions.
-
the influence of neighborhood socioeconomic status and ethnic Enclave on endometrial cancer mortality among hispanics and asian americans pacific islanders in california
Cancer Causes & Control, 2018Co-Authors: Renata Abrahao, Debbie Goldberg, Iona Cheng, Scarlett Lin Gomez, Julie Von Behren, Veronica Wendy SetiawanAbstract:We investigated the role of neighborhood socioeconomic status (nSES) and residence in ethnic Enclaves on mortality following endometrial cancer (EC) diagnosis among Hispanics and Asian Americans/Pacific Islanders (AAPI). Using California Cancer Registry data, enhanced with census block group information on ethnic Enclave and nSES, we examined 9,367 Hispanics and 5,878 AAPIs diagnosed with EC from 1988 to 2011. Cox proportional hazard models were used to estimate associations between all-cause and EC-specific mortality with nSES and ethnic Enclaves, adjusting for subject sociodemographic and tumor characteristics. Hispanics in the lowest SES neighborhoods had a 39% and 36% increased risk of all-cause and EC-specific mortality, respectively, compared to Hispanics in the highest SES neighborhoods. AAPIs in the lowest SES neighborhoods had a 37% increased risk of all-cause mortality compared to AAPIs in the highest SES neighborhoods. Living in an ethnic Enclave was associated with lower all-cause mortality risk for AAPIs. Mortality risk varied by nSES and ethnic Enclave among Hispanics and AAPIs. Women living in lower SES communities experienced significantly higher risk, highlighting the need to identify the specific neighborhood factors underlying these associations so that community-based interventions may be properly targeted.
-
Hodgkin lymphoma incidence in ethnic Enclaves in California
Leukemia & lymphoma, 2015Co-Authors: Sally L. Glaser, Ellen T. Chang, Christina A. Clarke, Theresa H.m. Keegan, Juan Yang, Scarlett Lin GomezAbstract:Hodgkin lymphoma (HL) incidence varies with migration and nativity, suggesting an influence of acculturation on risk. In population-based California data including 1483 Hispanic and 348 Asian/Pacific Islander (API) HL cases, we examined HL rates in residential neighborhoods classified by ethnic Enclave status (measuring degree of acculturation) and socioeconomic status (SES). Rates were inversely associated with Enclave intensity, although associations varied by gender and race. In females, the Enclave effect was stronger in low-SES settings, but rates were higher in less-ethnic/high-SES than more-ethnic/low-SES neighborhoods--diminishing Enclave intensity affected rates more than higher SES. In Hispanics, associations were modest, and only females experienced SES modification of rates; in APIs, the Enclave effect was much stronger. Thus, acculturation measured by residence in ethnic Enclaves affects HL rates independently of neighborhood SES but in complex patterns. Living in less-ethnic neighborhoods may increase HL rates by facilitating social isolation and other gender-specific exposures implicated in risk.