中文
相关论文

相关论文: Prime+Retouch: When Cache is Locked and Leaked

200 篇论文

Caches have been exploited to leak secret information due to the different times they take to handle memory accesses. Cache timing attacks include non-speculative cache side and covert channel attacks and cache-based speculative execution…

密码学与安全 · 计算机科学 2024-04-23 Guangyuan Hu , Ruby B. Lee

Performance degradation techniques are an important complement to side-channel attacks. In this work, we propose HyperDegrade -- a combination of previous approaches and the use of simultaneous multithreading (SMT) architectures. In…

密码学与安全 · 计算机科学 2021-09-22 Alejandro Cabrera Aldaya , Billy Bob Brumley

Cache attacks pose a threat to any code whose execution flow or memory accesses depend on sensitive information. Especially in public clouds, where caches are shared across several tenants, cache attacks remain an unsolved problem. Cache…

密码学与安全 · 计算机科学 2017-09-07 Samira Briongos , Gorka Irazoqui , Pedro Malagón , Thomas Eisenbarth

The last level cache is vulnerable to timing based side channel attacks because it is shared by the attacker and the victim processes even if they are located on different cores. These timing attacks evict the victim cache lines using small…

密码学与安全 · 计算机科学 2019-09-30 Kartik Ramkrishnan , Antonia Zhai , Stephen McCamant , Pen Chung Yew

Shared caches are vulnerable to side channel attacks through contention in cache sets. Besides being a simple source of information leak, these side channels form useful gadgets for more sophisticated attacks that compromise the security of…

密码学与安全 · 计算机科学 2024-08-27 Divya Ojha , Sandhya Dwarkadas

Trusted execution environments (TEEs) provide an environment for running workloads in the cloud without having to trust cloud service providers, by offering additional hardware-assisted security guarantees. However, main memory encryption…

密码学与安全 · 计算机科学 2023-09-25 Jan Wichelmann , Anna Pätschke , Luca Wilke , Thomas Eisenbarth

In modern computing environments, hardware resources are commonly shared, and parallel computation is widely used. Parallel tasks can cause privacy and security problems if proper isolation is not enforced. Intel proposed SGX to create a…

密码学与安全 · 计算机科学 2017-08-22 Ahmad Moghimi , Gorka Irazoqui , Thomas Eisenbarth

The timing characteristics of cache, a high-speed storage between the fast CPU and the slowmemory, may reveal sensitive information of a program, thus allowing an adversary to conduct side-channel attacks. Existing methods for detecting…

密码学与安全 · 计算机科学 2018-07-10 Shengjian Guo , Meng Wu , Chao Wang

Caches have been used to construct various types of covert and side channels to leak information. Most existing cache channels exploit the timing difference between cache hits and cache misses. However, we introduce a new and broader…

密码学与安全 · 计算机科学 2022-04-27 Yujie Cui , Chun Yang , Xu Cheng

Over the past years, literature has shown that attacks exploiting the microarchitecture of modern processors pose a serious threat to the privacy of mobile phone users. This is because applications leave distinct footprints in the…

密码学与安全 · 计算机科学 2020-07-09 Berk Gulmezoglu , Andreas Zankl , M. Caner Tol , Saad Islam , Thomas Eisenbarth , Berk Sunar

Recently discovered Spectre and meltdown attacks affects almost all processors by leaking confidential information to other processes through side-channel attacks. These vulnerabilities expose design flaws in the architecture of modern…

密码学与安全 · 计算机科学 2020-06-03 Bilal Ali Ahmad

Large Language Models (LLMs) rely on optimizations like Automatic Prefix Caching (APC) to accelerate inference. APC works by reusing previously computed states for the beginning part of a request (prefix), when another request starts with…

密码学与安全 · 计算机科学 2026-05-21 Panagiotis Georgios Pennas , Konstantinos Papaioannou , Marco Guarnieri , Thaleia Dimitra Doudali

CPU caches introduce variations into the execution time of programs that can be exploited by adversaries to recover private information about users or cryptographic keys. Establishing the security of countermeasures against this threat…

密码学与安全 · 计算机科学 2017-05-12 Goran Doychev , Boris Köpf

Traditional side-channels take advantage of secrets being used as inputs to unsafe instructions, used for memory accesses, or used in control flow decisions. Constant-time programming, which restricts such code patterns, has been widely…

密码学与安全 · 计算机科学 2026-01-21 Reshabh K Sharma , Dan Grossman , David Kohlbrenner

Shared processor caches are vulnerable to conflict-based side-channel attacks, where an attacker can monitor access patterns of a victim by evicting victim cache lines using cache-set conflicts. Recent mitigations propose randomized mapping…

密码学与安全 · 计算机科学 2021-03-25 Gururaj Saileshwar , Moinuddin Qureshi

Cache side-channel attacks extract secrets by examining how victim software accesses cache. To date, practical attacks on cryptosystems and media libraries are demonstrated under different scenarios, inferring secret keys and reconstructing…

密码学与安全 · 计算机科学 2022-10-04 Yuanyuan Yuan , Zhibo Liu , Shuai Wang

Recent work has introduced attacks that extract the architecture information of deep neural networks (DNN), as this knowledge enhances an adversary's capability to conduct black-box attacks against the model. This paper presents the first…

Caches are widely used to improve performance in modern processors. By carefully evicting cache lines and identifying cache hit/miss time, contention-based cache timing channel attacks can be orchestrated to leak information from the victim…

密码学与安全 · 计算机科学 2024-10-28 Tuo Li , Sri Parameswaran

Speculative execution which is used pervasively in modern CPUs can leave side effects in the processor caches and other structures even when the speculated instructions do not commit and their direct effect is not visible. The recent…

The Least-Recently Used cache replacement policy and its variants are widely deployed in modern processors. This paper shows for the first time in detail that the LRU states of caches can be used to leak information: any access to a cache…

密码学与安全 · 计算机科学 2020-01-06 Wenjie Xiong , Jakub Szefer