Filter and nested-lattice code design for fading MIMO channels with side-information

Linear-assignment Gel'fand-Pinsker coding (LA-GPC) is a coding technique for channels with interference known only at the transmitter, where the known interference is treated as side-information (SI). As a special case of LA-GPC, dirty paper coding has been shown to be able to achieve the optimal interference-free rate for interference channels with perfect channel state information at the transmitter (CSIT). In the cases where only the channel distribution information at the transmitter (CDIT) is available, LA-GPC also has good (sometimes optimal) performance in a variety of fast and slow fading SI channels. In this paper, we design the filters in nested-lattice based coding to make it achieve the same rate performance as LA-GPC in multiple-input multiple-output (MIMO) channels. Compared with the random Gaussian codebooks used in previous works, our resultant coding schemes have an algebraic structure and can be implemented in practical systems. A simulation in a slow-fading channel is also provided, and near interference-free error performance is obtained. The proposed coding schemes can serve as the fundamental building blocks to achieve the promised rate performance of MIMO Gaussian broadcast channels with CDIT or perfect CSITComment: submitted to IEEE Transactions on Communications, Feb, 200

Osiris: Automated Discovery of Microarchitectural Side Channels

In the last years, a series of side channels have been discovered on CPUs. These side channels have been used in powerful attacks, e.g., on cryptographic implementations, or as building blocks in transient-execution attacks such as Spectre or Meltdown. However, in many cases, discovering side channels is still a tedious manual process. In this paper, we present Osiris, a fuzzing-based framework to automatically discover microarchitectural side channels. Based on a machine-readable specification of a CPU's ISA, Osiris generates instruction-sequence triples and automatically tests whether they form a timing-based side channel. Furthermore, Osiris evaluates their usability as a side channel in transient-execution attacks, i.e., as the microarchitectural encoding for attacks like Spectre. In total, we discover four novel timing-based side channels on Intel and AMD CPUs. Based on these side channels, we demonstrate exploitation in three case studies. We show that our microarchitectural KASLR break using non-temporal loads, FlushConflict, even works on the new Intel Ice Lake and Comet Lake microarchitectures. We present a cross-core cross-VM covert channel that is not relying on the memory subsystem and transmits up to 1 kbit/s. We demonstrate this channel on the AWS cloud, showing that it is stealthy and noise resistant. Finally, we demonstrate Stream+Reload, a covert channel for transient-execution attacks that, on average, allows leaking 7.83 bytes within a transient window, improving state-of-the-art attacks that only leak up to 3 bytes

A modular FPGA-based ultrasonic array system for applications including non-destructive testing

This paper reports work aimed at the development of an ultrasonic imaging system comprising modular, reprogrammable building blocks, or tiles, which can be customised for multiple applications, including and within non-destructive testing (NDT), by the user. The key component is an autonomous module containing the ultrasonic array and all the electronics necessary to operate it. This contrasts with most previous research on system integration which has focused only on the transducer and front-end electronics.<p></p> In the present work, a 4 4 element 2D piezoelectric array with a 16 mm 16 mm aperture has been produced, with the entire transmission and reception electronics within the same footprint. The proximity of the transducer array and electronics removes the need for cabling, reducing signal degradation due to cross talk and interference. In addition, it avoids the problem of electrical impedance matching of cable between the array elements and the electronics. <p></p> Pulse-echo insertion loss of 48 dB has been measured from back-wall reflections in 73 mm-thick aluminium without decoding, and results with decoded signals show adequate signal-to-noise ratio (SNR) with 3.3 V excitation at an operating frequency of 1.2 MHz, within the range required for deep penetration in nuclear power plant. <p></p> Crucially, the ability to construct 2D arrays of any size and shape from generic building blocks represents a departure from almost all previous work in ultrasound, which has traditionally been highly application specific. This may allow ultrasonic NDT to be used in applications for which the investment in customised devices could not previously be justified. <p></p&gt

Building Blocks for Control System Software

Software implementation of control laws for industrial systems seem straightforward, but is not. The computer code stemming from the control laws is mostly not more than 10 to 30% of the total. A building-block approach for embedded control system development is advocated to enable a fast and efficient software design process.\ud We have developed the CTJ library, Communicating Threads for Java¿,\ud resulting in fundamental elements for creating building blocks to implement communication using channels. Due to the simulate-ability, our building block method is suitable for a concurrent engineering design approach. Furthermore, via a stepwise refinement process, using verification by simulation, the implementation trajectory can be done efficiently