Adversaries can deduce confidential information processed by a program by analyzing its
memory access patterns. Oblivious RAM (ORAM) converts a sequence of program memory …

We present a new generic cache template attack technique, LBTA, layered binary templating
attacks. LBTA uses multiple coarser-grained side channels to speed up cache-line …

Cache template attacks demonstrated automated leakage of user input in shared libraries.
However, for large binaries, the runtime is prohibitively high. Other automated approaches …

We present SEIF, a methodology that combines static analysis with symbolic execution to
verify and explicate information flow paths in a hardware design. SEIF begins with a …

Embedded systems are widely used for implementing diverse Internet-of-Things (IoT)
applications. These applications often deal with secret/sensitive data and encryption keys …

We propose a trace-based symbolic method for analyzing cache side channels of a program
under a CPU-level optimization called out-of-order execution (OOE). The method is …

We present SEIF, an exploratory methodology for information flow verification based on
symbolic execution. SEIF begins with a statically built overapproximation of the information …

云计算具有高性能, 服务化, 弹性伸缩, 环境友好等优点, 已经成为广泛采用的新型IT 基础设施.
资源外包与资源租赁的服务化本质, 导致安全与隐私需求尤为突出, 传统安全技术方案无法有效 …

Spectre attacks exploit speculative execution to leak sensitive information. In the last few
years, a number of static side-channel detectors have been proposed to detect cache …

Side-channel vulnerability detection has gained prominence recently due to Spectre and
Meltdown attacks. Techniques for side-channel detection range from fuzz testing to program …