43 citations · 86 across the 8 of their papers we have counts for
9 papers
Enter, Exit, Page Fault, Leak: Testing Isolation Boundaries for Microarchitectural Leaks
Oleksii Oleksenko, Flavien Solt, Cédric Fournet +3
CPUs provide isolation mechanisms like virtualization and privilege levels to protect software. Yet these focus on architectural isolation while typically overlooking microarchitec…
AMuLeT: Automated Design-Time Testing of Secure Speculation Countermeasures
Bo Fu, Leo Tenenbaum, David Adler +7
In recent years, several hardware-based countermeasures proposed to mitigate Spectre attacks have been shown to be insecure. To enable the development of effective secure speculati…
Hide and Seek with Spectres: Efficient discovery of speculative information leaks with random testing
Oleksii Oleksenko, Marco Guarnieri, Boris Köpf +1
Attacks like Spectre abuse speculative execution, one of the key performance optimizations of modern CPUs. Recently, several testing tools have emerged to automatically detect spec…
Revizor: Testing Black-box CPUs against Speculation Contracts
Oleksii Oleksenko, Christof Fetzer, Boris Köpf +1
Speculative vulnerabilities such as Spectre and Meltdown expose speculative execution state that can be exploited to leak information across security domains via side-channels. Suc…
T-Lease: A Trusted Lease Primitive for Distributed Systems
Bohdan Trach, Rasha Faqeh, Oleksii Oleksenko +3
A lease is an important primitive for building distributed protocols, and it is ubiquitously employed in distributed systems. However, the scope of the classic lease abstraction is…
SpecFuzz: Bringing Spectre-type vulnerabilities to the surface
Oleksii Oleksenko, Bohdan Trach, Mark Silberstein +1
SpecFuzz is the first tool that enables dynamic testing for speculative execution vulnerabilities (e.g., Spectre). The key is a novel concept of speculation exposure: The program i…
You Shall Not Bypass: Employing data dependencies to prevent Bounds Check Bypass
Oleksii Oleksenko, Bohdan Trach, Tobias Reiher +2
A recent discovery of a new class of microarchitectural attacks called Spectre picked up the attention of the security community as these attacks can circumvent many traditional me…
Intel MPX Explained: An Empirical Study of Intel MPX and Software-based Bounds Checking Approaches
Oleksii Oleksenko, Dmitrii Kuvaiskii, Pramod Bhatotia +2
Memory-safety violations are a prevalent cause of both reliability and security vulnerabilities in systems software written in unsafe languages like C/C++. Unfortunately, all the e…
Elzar: Triple Modular Redundancy using Intel Advanced Vector Extensions (technical report)
Dmitrii Kuvaiskii, Oleksii Oleksenko, Pramod Bhatotia +2
Instruction-Level Redundancy (ILR) is a well-known approach to tolerate transient CPU faults. It replicates instructions in a program and inserts periodic checks to detect and corr…