logo
科言猫学术研究的AI总结
language
手机端手机端
  • Phone Feature微信小程序
简体中文简体中文
notice消息通知
博客博客
delete
arrow
返回

SSMR: Statically Detecting Speculation Safe Memory Regions to Mitigate Transient Execution Attacks

delete2026-01-01
delete0
PRE
AI
A
Ange-Thierry Ishimwe *
S
Sam McDiarmid-Sterling
Z
Zack McKevitt
T
Tamara Silbergleit Lehman
DOI：10.1145/3771775.3786272delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
瞬时执行攻击利用推测执行通过未经授权的瞬时内存访问泄露机密数据。我们观察到瞬时攻击可以通过一个异常内存访问，即瞬时敏感数据访问来识别。为保护系统免受此类攻击同时最小化性能开销，我们提出利用编译时信息识别无法提取敏感数据的内存操作，并可因此被视为安全的操作。安全内存操作被允许瞬时执行，不会造成额外的性能成本。不安全内存操作延迟访问内存系统，直到它们不再处于推测状态，从而防止对敏感数据的未经授权的瞬时访问。为将此信息传达给微架构，我们引入了设置安全内存区域（ssmr）指令。该指令由编译器自动插入，建立可被指令序列瞬时访问的内存区域。该防御措施与不安全基线相比仅产生7%的性能开销，并缓解了至少两种变种的瞬时执行攻击。
Keyword:
Transient execution attacks
spectre
software-hardware defense

期刊

P
PROCEEDINGS OF THE 35TH ACM SIGPLAN INTERNATIONAL CONFERENCE ON COMPILER CONSTRUCTION, CC 2026
IF:
0
论文数:
18
被引数:
0

机构

University of Colorado System 封面图
University of Colorado System
学者数:
6.3W
论文数: 5.5W
被引数: 1.8K
引用论文

引用论文

The geometry of innocent flesh on the bone
errProceedings of the 14th ACM conference on Computer and communications security
IF0
err2007-10-28
err0
PREAI
errHovav Shacham
err分享
err收藏
Speculative interference attacks: breaking invisible speculation schemes
errProceedings of the 26th ACM International Conference on Architectural Support for Programming Languages and Operating Systems
IF0
err2021-04-17
err0
errOAAI
errMohammad Behnia; Prateek Sahu; Riccardo Paccagnella; Jiyong Yu; Zirui Neil Zhao; Xiang Zou; Thomas Unterluggauer; Josep Torrellas; Carlos Rozas; Adam Morrison; Frank Mckeen; Fangfei Liu; Ron Gabor; Christopher W. Fletcher; Abhishek Basak; Alaa Alameldeen
err分享
err收藏
CCured
errProceedings of the 29th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
IF0
err2002-01-01
err0
PREAI
errGeorge C. Necula; Scott McPeak; Westley Weimer
err分享
err收藏
NetSpectre: Read Arbitrary Memory over Network
errLecture Notes in Computer Science
IF0
err2019-09-15
err0
PREAI
errMichael Schwarz; Martin Schwarzl; Moritz Lipp; Jon Masters; Daniel Gruss
err分享
err收藏
MuonTrap: Preventing Cross-Domain Spectre-Like Attacks by Capturing Speculative State
err2020 ACM/IEEE 47th Annual International Symposium on Computer Architecture (ISCA)
IF0
err2020-05-01
err0
errOAAI
errSam Ainsworth; Timothy M. Jones
err分享
err收藏
A Survey of Microarchitectural Side-channel Vulnerabilities, Attacks, and Defenses in Cryptography
errACM COMPUTING SURVEYS
IF28
err2021-07-13
err41
errOAAI
errLou, Xiaoxuan; Zhang, Tianwei; Jiang, Jun; Zhang, Yinqian
err分享
err收藏
CacheOut: Leaking Data on Intel CPUs via Cache EvictionsCacheOut: 通过缓存驱逐在Intel cpu上泄漏数据
err2021 IEEE Symposium on Security and Privacy (SP)
IF0
err2021-05-01
err0
errOAAI
errStephan van Schaik; Marina Minkin; Andrew Kwong; Daniel Genkin; Yuval Yarom
err分享
err收藏
Phantom: Exploiting Decoder-detectable Mispredictions
err56th Annual IEEE/ACM International Symposium on Microarchitecture
IF0
err2023-10-28
err0
PREAI
errWikner,Johannes; Trujillo,Daniël; Razavi,Kaveh
err分享
err收藏
Fallout
errProceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security
IF0
err2019-11-06
err0
errOAAI
errClaudio Canella; Daniel Genkin; Lukas Giner; Daniel Gruss; Moritz Lipp; Marina Minkin; Daniel Moghimi; Frank Piessens; Michael Schwarz; Berk Sunar; Jo Van Bulck; Yuval Yarom
err分享
err收藏
oo7: Low-Overhead Defense Against Spectre Attacks via Program Analysis
errIEEE TRANSACTIONS ON SOFTWARE ENGINEERING
IF5.6
err2021-11-01
err28
errOAAI
errWang, Guanhua; Chattopadhyay, Sudipta; Gotovchits, Ivan; Mitra, Tulika; Roychoudhury, Abhik
err分享
err收藏
学者 查看更多内容