Matches in SemOpenAlex for { <https://semopenalex.org/work/W3198309679> ?p ?o ?g. }
- W3198309679 abstract "Modern processor designs use a variety of microarchitectural methods to achieve high performance. Unfortunately, new side-channels have often been uncovered that exploit these enhanced designs. One area that has received little attention from a security perspective is the processor's hard-ware prefetcher, a critical component used to mitigate DRAM latency in today's systems. Prefetchers, like branch predictors, hold critical state related to the execution of the application, and have the potential to leak secret information. But up to now, there has not been a demonstration of a generic prefetcher side-channel that could be actively exploited in today's hardware. In this paper, we present AfterImage, a new side-channel that exploits the Intel Instruction Pointer-based stride prefetcher. We observe that, when the execution of the processor switches between different private domains, the prefetcher trained by one domain can be triggered in another. To the best of our knowledge, this work is the first to publicly demonstrate a methodology that is both algorithm-agnostic and also able to leak kernel data into userspace. AfterImage is different from previous works, as it leaks data on the non-speculative path of execution. Because of this, a large class of work that has focused on protecting transient, branch-outcome-based data will be unable to block this side-channel. By reverse-engineering the IP-stride prefetcher in modern Intel processors, we have successfully developed three variants of AfterImage to leak control flow information across code regions, processes and the user-kernel boundary. We find a high level of accuracy in leaking information with our methodology (from 91%, up to 99%), and propose two mitigation techniques to block this side-channel, one of which can be used on hardware systems today." @default.
- W3198309679 created "2021-09-13" @default.
- W3198309679 creator A5023275972 @default.
- W3198309679 creator A5061402622 @default.
- W3198309679 creator A5069683581 @default.
- W3198309679 date "2021-09-01" @default.
- W3198309679 modified "2023-09-26" @default.
- W3198309679 title "Leaking Control Flow Information via the Hardware Prefetcher." @default.
- W3198309679 cites W1427174644 @default.
- W3198309679 cites W1488058190 @default.
- W3198309679 cites W1664413462 @default.
- W3198309679 cites W1954144304 @default.
- W3198309679 cites W2010128395 @default.
- W3198309679 cites W2053923031 @default.
- W3198309679 cites W2103289002 @default.
- W3198309679 cites W2111160280 @default.
- W3198309679 cites W2146573211 @default.
- W3198309679 cites W2160352512 @default.
- W3198309679 cites W2255548496 @default.
- W3198309679 cites W2296602564 @default.
- W3198309679 cites W2337480911 @default.
- W3198309679 cites W2507765405 @default.
- W3198309679 cites W2522718524 @default.
- W3198309679 cites W2532499458 @default.
- W3198309679 cites W2562036180 @default.
- W3198309679 cites W2612687770 @default.
- W3198309679 cites W2616901112 @default.
- W3198309679 cites W2808687865 @default.
- W3198309679 cites W2883613460 @default.
- W3198309679 cites W2889508486 @default.
- W3198309679 cites W2891854691 @default.
- W3198309679 cites W2899157124 @default.
- W3198309679 cites W2905380323 @default.
- W3198309679 cites W2945453534 @default.
- W3198309679 cites W2949870979 @default.
- W3198309679 cites W2950509746 @default.
- W3198309679 cites W2952265249 @default.
- W3198309679 cites W2962832225 @default.
- W3198309679 cites W2963047853 @default.
- W3198309679 cites W2963311060 @default.
- W3198309679 cites W2974322117 @default.
- W3198309679 cites W2979547870 @default.
- W3198309679 cites W2979780468 @default.
- W3198309679 cites W2985509521 @default.
- W3198309679 cites W3006781152 @default.
- W3198309679 cites W3015216799 @default.
- W3198309679 cites W3043167609 @default.
- W3198309679 cites W3088268709 @default.
- W3198309679 cites W3093210434 @default.
- W3198309679 cites W3094181213 @default.
- W3198309679 cites W3098569199 @default.
- W3198309679 cites W3137153123 @default.
- W3198309679 cites W3142766456 @default.
- W3198309679 cites W3152901657 @default.
- W3198309679 cites W3161170391 @default.
- W3198309679 cites W3190597741 @default.
- W3198309679 cites W3192025952 @default.
- W3198309679 cites W3214515980 @default.
- W3198309679 hasPublicationYear "2021" @default.
- W3198309679 type Work @default.
- W3198309679 sameAs 3198309679 @default.
- W3198309679 citedByCount "0" @default.
- W3198309679 crossrefType "posted-content" @default.
- W3198309679 hasAuthorship W3198309679A5023275972 @default.
- W3198309679 hasAuthorship W3198309679A5061402622 @default.
- W3198309679 hasAuthorship W3198309679A5069683581 @default.
- W3198309679 hasConcept C107598950 @default.
- W3198309679 hasConcept C111919701 @default.
- W3198309679 hasConcept C149635348 @default.
- W3198309679 hasConcept C150202949 @default.
- W3198309679 hasConcept C160191386 @default.
- W3198309679 hasConcept C165696696 @default.
- W3198309679 hasConcept C170723468 @default.
- W3198309679 hasConcept C178489894 @default.
- W3198309679 hasConcept C199360897 @default.
- W3198309679 hasConcept C2777904410 @default.
- W3198309679 hasConcept C38652104 @default.
- W3198309679 hasConcept C41008148 @default.
- W3198309679 hasConcept C489000 @default.
- W3198309679 hasConcept C49289754 @default.
- W3198309679 hasConcept C77088390 @default.
- W3198309679 hasConcept C9390403 @default.
- W3198309679 hasConceptScore W3198309679C107598950 @default.
- W3198309679 hasConceptScore W3198309679C111919701 @default.
- W3198309679 hasConceptScore W3198309679C149635348 @default.
- W3198309679 hasConceptScore W3198309679C150202949 @default.
- W3198309679 hasConceptScore W3198309679C160191386 @default.
- W3198309679 hasConceptScore W3198309679C165696696 @default.
- W3198309679 hasConceptScore W3198309679C170723468 @default.
- W3198309679 hasConceptScore W3198309679C178489894 @default.
- W3198309679 hasConceptScore W3198309679C199360897 @default.
- W3198309679 hasConceptScore W3198309679C2777904410 @default.
- W3198309679 hasConceptScore W3198309679C38652104 @default.
- W3198309679 hasConceptScore W3198309679C41008148 @default.
- W3198309679 hasConceptScore W3198309679C489000 @default.
- W3198309679 hasConceptScore W3198309679C49289754 @default.
- W3198309679 hasConceptScore W3198309679C77088390 @default.
- W3198309679 hasConceptScore W3198309679C9390403 @default.
- W3198309679 hasLocation W31983096791 @default.
- W3198309679 hasOpenAccess W3198309679 @default.