Matches in SemOpenAlex for { <https://semopenalex.org/work/W3097736620> ?p ?o ?g. }
- W3097736620 abstract "Kernel Address Space Layout Randomization (KASLR) has been repeatedly targeted by side-channel attacks that exploit a typical unified user/kernel address space organization to disclose randomized kernel addresses. The community has responded with kernel address space isolation techniques that separate user and kernel address spaces (and associated resources) to eradicate all existing side-channel attacks. In this paper, we show that kernel address space isolation is insufficient to harden KASLR against practical side-channel attacks on modern tagged TLB architectures. While tagged TLBs have been praised for optimizing the performance of kernel address space isolation, we show that they also silently break its original security guarantees and open up opportunities for new derandomization attacks. As a concrete demonstration, we present TagBleed, a new side-channel attack that abuses tagged TLBs and residual translation information to break KASLR even in the face of state-of-the-art mitigations. TagBleed is practical and shows that implementing secure address space isolation requires deep partitioning of microarchitectural resources and a more generous performance budget than previously assumed." @default.
- W3097736620 created "2020-11-09" @default.
- W3097736620 creator A5000681493 @default.
- W3097736620 creator A5029566823 @default.
- W3097736620 creator A5082033768 @default.
- W3097736620 creator A5083941826 @default.
- W3097736620 date "2020-09-01" @default.
- W3097736620 modified "2023-10-17" @default.
- W3097736620 title "TagBleed: Breaking KASLR on the Isolated Kernel Address Space using Tagged TLBs" @default.
- W3097736620 cites W1503814339 @default.
- W3097736620 cites W156987080 @default.
- W3097736620 cites W1591211019 @default.
- W3097736620 cites W1613874182 @default.
- W3097736620 cites W1821583647 @default.
- W3097736620 cites W1890449996 @default.
- W3097736620 cites W1934458198 @default.
- W3097736620 cites W1963947298 @default.
- W3097736620 cites W1964281299 @default.
- W3097736620 cites W1964389195 @default.
- W3097736620 cites W1992291252 @default.
- W3097736620 cites W2001759130 @default.
- W3097736620 cites W2033593513 @default.
- W3097736620 cites W2056073317 @default.
- W3097736620 cites W2061354941 @default.
- W3097736620 cites W2089448621 @default.
- W3097736620 cites W2103289002 @default.
- W3097736620 cites W2119028650 @default.
- W3097736620 cites W2126132644 @default.
- W3097736620 cites W2131202839 @default.
- W3097736620 cites W2147150814 @default.
- W3097736620 cites W2155810272 @default.
- W3097736620 cites W2171863291 @default.
- W3097736620 cites W2172060328 @default.
- W3097736620 cites W2255548496 @default.
- W3097736620 cites W2302098303 @default.
- W3097736620 cites W2473598730 @default.
- W3097736620 cites W2516668814 @default.
- W3097736620 cites W2529582363 @default.
- W3097736620 cites W2532499458 @default.
- W3097736620 cites W2559892799 @default.
- W3097736620 cites W2612687770 @default.
- W3097736620 cites W2616901112 @default.
- W3097736620 cites W2664885055 @default.
- W3097736620 cites W2763937362 @default.
- W3097736620 cites W2791034507 @default.
- W3097736620 cites W2954241526 @default.
- W3097736620 cites W2963311060 @default.
- W3097736620 cites W2982848142 @default.
- W3097736620 cites W4242926647 @default.
- W3097736620 doi "https://doi.org/10.1109/eurosp48549.2020.00027" @default.
- W3097736620 hasPublicationYear "2020" @default.
- W3097736620 type Work @default.
- W3097736620 sameAs 3097736620 @default.
- W3097736620 citedByCount "11" @default.
- W3097736620 countsByYear W30977366202019 @default.
- W3097736620 countsByYear W30977366202020 @default.
- W3097736620 countsByYear W30977366202021 @default.
- W3097736620 countsByYear W30977366202022 @default.
- W3097736620 countsByYear W30977366202023 @default.
- W3097736620 crossrefType "proceedings-article" @default.
- W3097736620 hasAuthorship W3097736620A5000681493 @default.
- W3097736620 hasAuthorship W3097736620A5029566823 @default.
- W3097736620 hasAuthorship W3097736620A5082033768 @default.
- W3097736620 hasAuthorship W3097736620A5083941826 @default.
- W3097736620 hasConcept C111919701 @default.
- W3097736620 hasConcept C114614502 @default.
- W3097736620 hasConcept C144240696 @default.
- W3097736620 hasConcept C165696696 @default.
- W3097736620 hasConcept C178489894 @default.
- W3097736620 hasConcept C2775941552 @default.
- W3097736620 hasConcept C33923547 @default.
- W3097736620 hasConcept C38652104 @default.
- W3097736620 hasConcept C41008148 @default.
- W3097736620 hasConcept C49289754 @default.
- W3097736620 hasConcept C74193536 @default.
- W3097736620 hasConcept C86803240 @default.
- W3097736620 hasConcept C89423630 @default.
- W3097736620 hasConceptScore W3097736620C111919701 @default.
- W3097736620 hasConceptScore W3097736620C114614502 @default.
- W3097736620 hasConceptScore W3097736620C144240696 @default.
- W3097736620 hasConceptScore W3097736620C165696696 @default.
- W3097736620 hasConceptScore W3097736620C178489894 @default.
- W3097736620 hasConceptScore W3097736620C2775941552 @default.
- W3097736620 hasConceptScore W3097736620C33923547 @default.
- W3097736620 hasConceptScore W3097736620C38652104 @default.
- W3097736620 hasConceptScore W3097736620C41008148 @default.
- W3097736620 hasConceptScore W3097736620C49289754 @default.
- W3097736620 hasConceptScore W3097736620C74193536 @default.
- W3097736620 hasConceptScore W3097736620C86803240 @default.
- W3097736620 hasConceptScore W3097736620C89423630 @default.
- W3097736620 hasFunder F4320321800 @default.
- W3097736620 hasFunder F4320333065 @default.
- W3097736620 hasLocation W30977366201 @default.
- W3097736620 hasOpenAccess W3097736620 @default.
- W3097736620 hasPrimaryLocation W30977366201 @default.
- W3097736620 hasRelatedWork W1481299995 @default.
- W3097736620 hasRelatedWork W2002972382 @default.
- W3097736620 hasRelatedWork W2187908796 @default.
- W3097736620 hasRelatedWork W2390022706 @default.
- W3097736620 hasRelatedWork W2479815751 @default.