Evolution of Defenses against Transient-Execution Attacks

Claudio Alberto Canella; Sai Manoj Pudukotai Dinakarrao; Daniel Gruß; Khaled N. Khasawneh

doi:10.1145/3386263.3407584

Evolution of Defenses against Transient-Execution Attacks

Claudio Alberto Canella, Sai Manoj Pudukotai Dinakarrao, Daniel Gruß, Khaled N. Khasawneh

Institut für Angewandte Informationsverarbeitung und Kommunikationstechnologie (7050)

Publikation: Beitrag in Buch/Bericht/Konferenzband › Beitrag in einem Konferenzband

Abstract

Transient-execution attacks, such as Meltdown and Spectre, exploit performance optimizations in modern CPUs to enable unauthorized access to data across protection boundaries. Against these attacks, we have noticed a rapid growth of deployed and proposed countermeasures. In this paper, we show the evolution of countermeasures
against transient-execution attacks by both industry and academia since the initial discoveries of the attacks. We show that despite the advances in the understanding and systematic view of the field, the proposed and deployed defenses are limited.

Originalsprache	englisch
Titel	GLSVLSI 2020 - Proceedings of the 2020 Great Lakes Symposium on VLSI
Herausgeber (Verlag)	ACM/IEEE
Seiten	169-174
Seitenumfang	6
ISBN (elektronisch)	9781450379441
DOIs	https://doi.org/10.1145/3386263.3407584
Publikationsstatus	Veröffentlicht - 7 Sept. 2020
Veranstaltung	GLSVLSI 2020: 30th ACM Great Lakes Symposium on VLSI - Virtuell, China Dauer: 8 Sept. 2020 → 11 Sept. 2020

Publikationsreihe

Name	Proceedings of the ACM Great Lakes Symposium on VLSI, GLSVLSI

Konferenz

Konferenz	GLSVLSI 2020
Land/Gebiet	China
Ort	Virtuell
Zeitraum	8/09/20 → 11/09/20

ASJC Scopus subject areas

Allgemeiner Maschinenbau

Zugriff auf Dokument

10.1145/3386263.3407584

transient-defensesAkzeptiertes Autorenmanuskript, 443 KB

Andere Dateien und Links

http://www.scopus.com/inward/record.url?scp=85091270235&partnerID=8YFLogxK

Espresso - Skalierbare hardware-gesicherte authentifizierung und Personalisierung intelligenter Sensorknoten
Mangard, S.
1/05/18 → 31/10/20
Projekt: Forschungsprojekt
EU - SOPHIA - Absicherung von Software gegen Physische Angriffe
Mangard, S.
1/09/16 → 31/08/21
Projekt: Forschungsprojekt

Dieses zitieren

Evolution of Defenses against Transient-Execution Attacks. / Canella, Claudio Alberto; Pudukotai Dinakarrao, Sai Manoj; Gruß, Daniel et al.
GLSVLSI 2020 - Proceedings of the 2020 Great Lakes Symposium on VLSI. ACM/IEEE, 2020. S. 169-174 (Proceedings of the ACM Great Lakes Symposium on VLSI, GLSVLSI).

Publikation: Beitrag in Buch/Bericht/Konferenzband › Beitrag in einem Konferenzband

@inproceedings{838829adadee449b9e1f9c0f8bbf97ef,

title = "Evolution of Defenses against Transient-Execution Attacks",

abstract = "Transient-execution attacks, such as Meltdown and Spectre, exploit performance optimizations in modern CPUs to enable unauthorized access to data across protection boundaries. Against these attacks, we have noticed a rapid growth of deployed and proposed countermeasures. In this paper, we show the evolution of countermeasuresagainst transient-execution attacks by both industry and academia since the initial discoveries of the attacks. We show that despite the advances in the understanding and systematic view of the field, the proposed and deployed defenses are limited.",

keywords = "Transient-execution attacks, Meltdown, Spectre, LVI",

author = "Canella, {Claudio Alberto} and {Pudukotai Dinakarrao}, {Sai Manoj} and Daniel Gru{\ss} and Khasawneh, {Khaled N.}",

year = "2020",

month = sep,

day = "7",

doi = "10.1145/3386263.3407584",

language = "English",

series = "Proceedings of the ACM Great Lakes Symposium on VLSI, GLSVLSI",

publisher = "ACM/IEEE",

pages = "169--174",

booktitle = "GLSVLSI 2020 - Proceedings of the 2020 Great Lakes Symposium on VLSI",

note = "GLSVLSI 2020 : 30th ACM Great Lakes Symposium on VLSI ; Conference date: 08-09-2020 Through 11-09-2020",

}

TY - GEN

T1 - Evolution of Defenses against Transient-Execution Attacks

AU - Canella, Claudio Alberto

AU - Pudukotai Dinakarrao, Sai Manoj

AU - Gruß, Daniel

AU - Khasawneh, Khaled N.

PY - 2020/9/7

Y1 - 2020/9/7

N2 - Transient-execution attacks, such as Meltdown and Spectre, exploit performance optimizations in modern CPUs to enable unauthorized access to data across protection boundaries. Against these attacks, we have noticed a rapid growth of deployed and proposed countermeasures. In this paper, we show the evolution of countermeasuresagainst transient-execution attacks by both industry and academia since the initial discoveries of the attacks. We show that despite the advances in the understanding and systematic view of the field, the proposed and deployed defenses are limited.

AB - Transient-execution attacks, such as Meltdown and Spectre, exploit performance optimizations in modern CPUs to enable unauthorized access to data across protection boundaries. Against these attacks, we have noticed a rapid growth of deployed and proposed countermeasures. In this paper, we show the evolution of countermeasuresagainst transient-execution attacks by both industry and academia since the initial discoveries of the attacks. We show that despite the advances in the understanding and systematic view of the field, the proposed and deployed defenses are limited.

KW - Transient-execution attacks

KW - Meltdown

KW - Spectre

KW - LVI

UR - http://www.scopus.com/inward/record.url?scp=85091270235&partnerID=8YFLogxK

U2 - 10.1145/3386263.3407584

DO - 10.1145/3386263.3407584

M3 - Conference paper

T3 - Proceedings of the ACM Great Lakes Symposium on VLSI, GLSVLSI

SP - 169

EP - 174

BT - GLSVLSI 2020 - Proceedings of the 2020 Great Lakes Symposium on VLSI

PB - ACM/IEEE

T2 - GLSVLSI 2020

Y2 - 8 September 2020 through 11 September 2020

ER -

Evolution of Defenses against Transient-Execution Attacks

Abstract

Publikationsreihe

Konferenz

ASJC Scopus subject areas

Zugriff auf Dokument

Andere Dateien und Links

Fingerprint

Projekte

Espresso - Skalierbare hardware-gesicherte authentifizierung und Personalisierung intelligenter Sensorknoten

EU - SOPHIA - Absicherung von Software gegen Physische Angriffe

Dieses zitieren