English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Spectre attacks disclosed in early 2018 expose data leakage scenarios viacache side channels. Specifically, speculatively executed paths due to branchmis-prediction may bring secret data into the cache which are then exposed viacache side channels even after the speculative execution is squashed. Symbolicexecution is a well-known test generation method to cover program paths at thelevel of the application software. In this paper, we extend symbolic executionwith modelingof cache and speculative execution. Our tool KLEESPECTRE, built ontop of the KLEE symbolic execution engine, can thus provide a testing engine tocheck for the data leakage through cache side-channel as shown via Spectreattacks. Our symbolic cache model can verify whether the sensitive data leakagedue to speculative execution can be observed by an attacker at a given programpoint. Our experiments show that KLEESPECTREcan effectively detect data leakagealong speculatively executed paths and our cache model can further make theleakage detection much more precise.

KLEESPECTRE: Detecting Information Leakage through Speculative Cache Attacks via Symbolic Execution