This work shows that several state-of-the-art selective-speculation defenses rest on shared assumptions that overlook important microarchitectural behaviors, leaving systematic blind spots that admit secret-dependent reservation-station (RS) contention, and proposes strengthened STT mechanisms that close both existing and newly exposed gaps at moderate performance overhead.
This paper systematically analyze a set of x86 instructions that directly or indirectly invalidate instruction cache lines, revealing measurable timing asymmetries between cache hits and misses, and shows that these SMC-induced timing artifacts can be leveraged to mount high-resolution cache attacks that are both steal...
Seonghun Son, Daniel Moghimi, Berk Gulmezoglu· ACM Transactions on Architec...· 0 citations
This work presents DDRop, a new primitive that exploits the absence of cryptographic freshness to break the integrity of Intel TDX, Scalable SGX, and AMD SEV-SNP and demonstrates end-to-end attacks on an up-to-date TDX platform.
ETHZurich, Zúrich, Switzerland et al.· 0 citations
JITterFlip is presented, the first BFA targeting the host-side JIT serving control plane of GPU-based LLM inference, and develops a decision-guided fault-vulnerable code analysis that enables both gibberish output generation and a correct-output sponge attack.
Tai-Rui Wang, Zhi Zhang, Yan-Song Gao et al.· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.
