It is found that although the new protection measures aimed at stopping popular heap exploit techniques or restricting the exploit strategy space can effectively defend against the exploitation of most vulnerabilities, the attack strategies proposed by this work can still make these vulnerabilities exploitable again.
MixSan, a prototype built on RangeSanitizer (RSan), stores the same identity tag in pointer high bits through Intel Linear Address Masking (LAM) U57 and validates both the tag and the spatial bound with a unified 3-ALU-op check.
Xiao-Yun Lu, Qiang Wei, Yun-Feng Wang et al.· Applied Sciences· 0 citations
This work develops a novel low-overhead methodology for measuring the cost of GCs, by combining isolated thread monitoring using a combination of real hardware and calibrated cycle-accurate simulation, which allows for fine-grained analysis of modern GC overheads.
Sudhanshu Agarwal, Saugata Ghose· Proceedings of the ACM on Pr...· 0 citations
This paper systematically analyze a set of x86 instructions that directly or indirectly invalidate instruction cache lines, revealing measurable timing asymmetries between cache hits and misses, and shows that these SMC-induced timing artifacts can be leveraged to mount high-resolution cache attacks that are both steal...
Seonghun Son, Daniel Moghimi, Berk Gulmezoglu· ACM Transactions on Architec...· 0 citations
This work presents DDRop, a new primitive that exploits the absence of cryptographic freshness to break the integrity of Intel TDX, Scalable SGX, and AMD SEV-SNP and demonstrates end-to-end attacks on an up-to-date TDX platform.
ETHZurich, Zúrich, Switzerland et al.· 0 citations
Meltdown and Specter exploit hardware vulnerabilities in modern processors. These vulnerabilities allow programs to steal data currently being processed on the computer. Although programs are typically not permitted to read data from other programs, a malicious program can exploit Meltdown and Specter to access secrets...
Faisal Mushtaq· International Journal of Adv...· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.
