Augmented Symbolic Execution for Information Flow in Hardware Designs

We present SEIF, a methodology that combines static analysis with symbolic execution to verify and explicate information flow paths in a hardware design. SEIF begins with a statically built model of the information flow through a design and uses guided symbolic execution to recognize and eliminate non-flows with high precision or to find corresponding paths through the design state for true flows. We evaluate SEIF on two open-source CPUs, an AES core, and the AKER access control module. SEIF can exhaustively explore 10-12 clock cycles deep in 4-6 seconds on average, and can automatically account for 86-90% of the paths in the statically built model. Additionally, SEIF can be used to find multiple violating paths for security properties, providing a new angle for security verification

MAGICCARPET: Verified Detection and Recovery for Hardware-based Exploits

Abstract—MAGICCARPET is a new approach to defending systems against exploitable processor bugs. MAGICCARPET uses hardware to detect violations of invariants involving security-critical processor state and uses firmware to correctly push software’s state past the violations. The invariants are specified at run time. MAGICCARPET focuses on dynamically validating updates to security-critical processor state. In this work, (1) we generate correctness proofs for both MAGICCARPET hardware and firmware; (2) we prove that processor state and events never violate our security invariants at runtime; and (3) we show that MAGICCARPET copes with hardware-based exploits discovered post-fabrication using a combination of verified reconfigurations of invariants in the fabric and verified recoveries via reprogrammable software. We implement MAGICCARPET inside a popular open source processor on an FPGA platform. We evaluate MAGICCARPET using a diverse set of hardware-based attacks based on escaped and exploitable commercial processor bugs. MAGICCARPET is able to detect and recover from all tested attacks with no software run-time overhead in the attack-free case

A rapid sensitive assay for phosphatidate phosphohydrolase

For a purified preparation of the soluble form of phosphatidate phosphohydrolase (EC 3.1.3.4) from guinea pig cerebral cortex, 1-O-alkyl-rac-glycerol 3-phosphate was found to be accepted as a substrate. This substrate analog was tritium-labeled in order to serve in a rapid sensitive assay for the enzyme, in which labeled 1-alkyl glycerol is released. Heat denaturation and enzyme activity dependence on pH indicated that 1-O-alkyl-rac-glycerol 3-phosphate phosphohydrolase and phosphatidate phosphohydrolase activities in the preparation are attributable to the same enzyme. 1-O-Alkyl-rac-glycerol 3-phosphate was hydrolyzed with a Vmax of 1.7 nmol min-1 mg-1 of protein and a Km of 270 [mu].Peer Reviewedhttp://deepblue.lib.umich.edu/bitstream/2027.42/22588/1/0000136.pd

Accumulation of an Antidepressant in Vesiculogenic Membranes of Yeast Cells Triggers Autophagy

Many antidepressants are cationic amphipaths, which spontaneously accumulate in natural or reconstituted membranes in the absence of their specific protein targets. However, the clinical relevance of cellular membrane accumulation by antidepressants in the human brain is unknown and hotly debated. Here we take a novel, evolutionarily informed approach to studying the effects of the selective-serotonin reuptake inhibitor sertraline/Zoloft® on cell physiology in the model eukaryote Saccharomyces cerevisiae (budding yeast), which lacks a serotonin transporter entirely. We biochemically and pharmacologically characterized cellular uptake and subcellular distribution of radiolabeled sertraline, and in parallel performed a quantitative ultrastructural analysis of organellar membrane homeostasis in untreated vs. sertraline-treated cells. These experiments have revealed that sertraline enters yeast cells and then reshapes vesiculogenic membranes by a complex process. Internalization of the neutral species proceeds by simple diffusion, is accelerated by proton motive forces generated by the vacuolar H+-ATPase, but is counteracted by energy-dependent xenobiotic efflux pumps. At equilibrium, a small fraction (10–15%) of reprotonated sertraline is soluble while the bulk (90–85%) partitions into organellar membranes by adsorption to interfacial anionic sites or by intercalation into the hydrophobic phase of the bilayer. Asymmetric accumulation of sertraline in vesiculogenic membranes leads to local membrane curvature stresses that trigger an adaptive autophagic response. In mutants with altered clathrin function, this adaptive response is associated with increased lipid droplet formation. Our data not only support the notion of a serotonin transporter-independent component of antidepressant function, but also enable a conceptual framework for characterizing the physiological states associated with chronic but not acute antidepressant administration in a model eukaryote