activity
20142024
most citedA Systematic Evaluation of Transient Execution Attacks and Defenses

156 citations · 297 across the 16 of their papers we have counts for

collaborators
Showing cs.CRShow all

10 papers · 1 filter

cs.CR2024★ 6 cited

Libra: Architectural Support For Principled, Secure And Efficient Balanced Execution On High-End Processors (Extended Version)

Hans Winderix, Marton Bognar, Lesly-Ann Daniel +1

Control-flow leakage (CFL) attacks enable an attacker to expose control-flow decisions of a victim program via side-channel observations. Linearization (i.e., elimination) of secre…

cs.CR2023★ 2 cited

ProSpeCT: Provably Secure Speculation for the Constant-Time Policy (Extended version)

Lesly-Ann Daniel, Marton Bognar, Job Noorman +3

We propose ProSpeCT, a generic formal processor model providing provably secure speculation for the constant-time policy. For constant-time programs under a non-speculative semanti…

cs.CR2022★ 10 cited

End-to-End Security for Distributed Event-Driven Enclave Applications on Heterogeneous TEEs

Gianluca Scopelliti, Sepideh Pouyanrad, Job Noorman +4

This paper presents an approach to provide strong assurance of the secure execution of distributed event-driven applications on shared infrastructures, while relying on a small Tru…

cs.CR2021★ 10 cited

Automated Fuzzing of Automotive Control Units

Timothy Werquin, Roos Hubrechtsen, Ashok Thangarajan +2

Modern vehicles are governed by a network of Electronic Control Units (ECUs), which are programmed to sense inputs from the driver and the environment, to process these inputs, and…

cs.CR2020★ 7 cited

CopyCat: Controlled Instruction-Level Attacks on Enclaves

Daniel Moghimi, Jo Van Bulck, Nadia Heninger +2

The adversarial model presented by trusted execution environments (TEEs) has prompted researchers to investigate unusual attack vectors. One particularly powerful class of controll…

cs.CR2020★ 1 cited

Provably Secure Isolation for Interruptible Enclaved Execution on Small Microprocessors: Extended Version

Matteo Busi, Job Noorman, Jo Van Bulck +4

Computer systems often provide hardware support for isolation mechanisms like privilege levels, virtual memory, or enclaved execution. Over the past years, several successful softw…

cs.CR2019★ 39 cited

Fallout: Reading Kernel Writes From User Space

Marina Minkin, Daniel Moghimi, Moritz Lipp +7

Recently, out-of-order execution, an important performance optimization in modern high-end processors, has been revealed to pose a significant security threat, allowing information…

cs.CR2018★ 156 cited

A Systematic Evaluation of Transient Execution Attacks and Defenses

Claudio Canella, Jo Van Bulck, Michael Schwarz +6

Research on transient execution attacks including Spectre and Meltdown showed that exception or branch misprediction events might leave secret-dependent traces in the CPU's microar…

cs.CR2017★ 11 cited

The Heisenberg Defense: Proactively Defending SGX Enclaves against Page-Table-Based Side-Channel Attacks

Raoul Strackx, Frank Piessens

Protected-module architectures (PMAs) have been proposed to provide strong isolation guarantees, even on top of a compromised system. Unfortunately, Intel SGX -- the only publicly…

cs.CR2014★ 3 cited

On the effectiveness of virtualization-based security

Francesco Gadaleta, Raoul Strackx, Nick Nikiforakis +2

Protecting commodity operating systems and applications against malware and targeted attacks has proven to be difficult. In recent years, virtualization has received attention from…