.png){kind=icon}
返回
Transient-Execution Attacks: A Computer Architect Perspective
.png){kind=icon}
OA
AI
DOI：10.1145/3603619.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Computer architects employ a series of performance optimizations at the micro-architecture level. These optimizations are meant to be invisible to the programmer but they are implicitly programmed alongside the architectural state. Critically, the incorrect results of these optimizations are not scrubbed off the micro-architectural state. This side-effect may seem innocuous. However, through transient-execution, an attacker can leverage this knowledge to obtain information from the micro-architectural state and transmit the data to itself. Transient-Execution is a class of attacks that use the side-effects of executed instructions to leak data. Transient-Execution attacks are split into two categories: speculation-based (Spectre-type) and exception-based (Meltdown-type). A successful attack requires, first, access to the sensitive information, and, second, a transmission channel such that the data can be recovered. Therefore, this survey explains how an attacker can use the state from optimizations in the micro-architecture to access sensitive information from other programs running in the same device; and, once the information is obtained, it describes how the data can be encoded and transmitted in the micro-architectural state. Moreover, it introduces a taxonomy and analyzes defenses for such malicious attacks.
Keyword:
Micro-architecture
transient-execution attacks
side-channel analysis
期刊
IF:
28
论文数:
2.5K
被引数:
3.5W
机构
引用论文
分享收藏
Picocystis salinarum gen. et sp. nov. (Chlorophyta) – a new picoplanktonic green alga.png)
Phycologia
PhycologiaIF0
PREAI
分享收藏
查看更多内容