We propose ProSpeCT, a generic formal processor model providing provably secure
speculation for the constant-time policy. For constant-time programs under a non …

RISC–V is an emerging technology, with applications ranging from embedded devices to
high-performance servers. Therefore, more and more security-critical workloads will be …

The ciphertext side channel is a new type of side channels that exploits deterministic
memory encryption of trusted execution environments (TEE). It enables the adversary with …

Symbolic execution is a powerful program analysis technique which allows executing
programs with symbolic inputs. Modern symbolic execution tools use a concrete modeling of …

Information leakage via timing side-channel analysis can compromise embedded systems
used in diverse applications that are otherwise secure. Most state-of-the-art timing side …

Microarchitectural side channel attacks have been very prominent in security research over
the last few years. Caches proved to be an outstanding side channel, as they provide high …

Side-channel attacks allow adversaries to infer sensitive information, such as cryptographic
keys or private user data, by monitoring unintentional information leaks of running programs …

As one of the fundamental optimizations in modern processors, the out-of-order execution
boosts the pipeline throughput by executing independent instructions in parallel rather than …

The high-profile Spectre attack and its variants have revealed that speculative execution
may leave secret-dependent footprints in the cache, allowing an attacker to learn …

Conflict-based cache attacks can leak critical information from target programs. Accordingly,
randomization-based cache designs have emerged as an efficient and LLC-favorable way …