Compilers often weaken or even discard software-based countermeasures commonly used
to protect programs against side-channel attacks; worse, they may also introduce …

Spatial memory errors such as buffer overflows still rank among the top vulnerabilities in
C/C++ programs. Despite much research in the area, the performance overhead of (even …

Interrupts are critical hardware resources for OS kernels to schedule processes. As they are
related to system activities, interrupts can be used to mount various side-channel attacks (ie …

Apple silicon is the proprietary ARM-based processor that powers the mainstream of Apple
devices. The move to this proprietary architecture presents unique challenges in addressing …

Spectre attacks can steal private information via some usual code snippets, and the difficulty
in detecting Spectre gadgets is to mine the differences between the same code snippet in …

ARM Memory Tagging Extension (MTE) is a new hardware feature introduced in ARMv8. 5-
A architecture, aiming to detect memory corruption vulnerabilities. The low overhead of MTE …

High-performance IO demands low-overhead communication between user-and kernel
space. This demand can no longer be fulfilled by traditional system calls. Linux's extended …

High-performance IO demands low-overhead communication between user-and kernel
space. This demand can no longer be fulfilled by traditional system calls. Linux's extended …

Abstract The Performance Monitoring Unit (PMU), a standard feature in all modern
computing systems, presents significant security risks by leaking sensitive user activities …

Several software mitigations have been proposed to defend against Spectre vulnerabilities.
However, these countermeasures often suffer from high performance overhead, largely due …