KLEESpectre: Detecting information leakage through speculative cache attacks via symbolic execution

G Wang, S Chattopadhyay, AK Biswas, T Mitra… - ACM Transactions on …, 2020 - dl.acm.org
Spectre-style attacks disclosed in early 2018 expose data leakage scenarios via cache side
channels. Specifically, speculatively executed paths due to branch mis-prediction may bring …

[PDF][PDF] oo7: Low-overhead defense against spectre attacks via binary analysis

G Wang, S Chattopadhyay, I Gotovchits… - arXiv preprint arXiv …, 2018 - comp.nus.edu.sg
The Spectre vulnerability in modern processors has been reported earlier this year (2018).
The key insight in this vulnerability is that speculative execution in processors can be …

oo7: Low-overhead defense against spectre attacks via program analysis

G Wang, S Chattopadhyay, I Gotovchits… - IEEE Transactions …, 2019 - ieeexplore.ieee.org
The Spectre vulnerability in modern processors has been widely reported. The key insight in
this vulnerability is that speculative execution in processors can be misused to access the …

Online detection of spectre attacks using microarchitectural traces from performance counters

C Li, JL Gaudiot - 2018 30th International Symposium on …, 2018 - ieeexplore.ieee.org
To improve processor performance, computer architects have adopted such acceleration
techniques as speculative execution and caching. However, researchers have recently …

CaSym: Cache aware symbolic execution for side channel detection and mitigation

R Brotzman, S Liu, D Zhang, G Tan… - 2019 IEEE Symposium …, 2019 - ieeexplore.ieee.org
Cache-based side channels are becoming an important attack vector through which secret
information can be leaked to malicious parties. implementations and Previous work on …

An analysis of speculative type confusion vulnerabilities in the wild

O Kirzner, A Morrison - 30th USENIX Security Symposium (USENIX …, 2021 - usenix.org
Spectre v1 attacks, which exploit conditional branch misprediction, are often identified with
attacks that bypass array bounds checking to leak data from a victim's memory. Generally …

Branchspec: Information leakage attacks exploiting speculative branch instruction executions

MHI Chowdhuryy, H Liu, F Yao - 2020 IEEE 38th International …, 2020 - ieeexplore.ieee.org
Recent studies on attacks exploiting processor hardware vulnerabilities have raised
significant concern for information security. Particularly, transient execution attacks such as …

The code that never ran: Modeling attacks on speculative evaluation

C Disselkoen, R Jagadeesan… - 2019 IEEE Symposium …, 2019 - ieeexplore.ieee.org
This paper studies information flow caused by speculation mechanisms in hardware and
software. The Spectre attack shows that there are practical information flow attacks which …

Speculative interference attacks: Breaking invisible speculation schemes

M Behnia, P Sahu, R Paccagnella, J Yu… - Proceedings of the 26th …, 2021 - dl.acm.org
Recent security vulnerabilities that target speculative execution (eg, Spectre) present a
significant challenge for processor design. These highly publicized vulnerabilities use …

Spectreguard: An efficient data-centric defense mechanism against spectre attacks

J Fustos, F Farshchi, H Yun - Proceedings of the 56th Annual Design …, 2019 - dl.acm.org
Speculative execution is an essential performance enhancing technique in modern
processors, but it has been shown to be insecure. In this paper, we propose SpectreGuard, a …