English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

MicroScope, and microarchitectural replay attacks in general, take advantageof the characteristics of speculative execution to trap the execution of thevictim application in an infinite loop, enabling the attacker to amplify aside-channel attack by executing it indefinitely. Due to the nature of thereplay, it can be used to effectively attack security critical trustedexecution environments (secure enclaves), even under conditions where aside-channel attack would not be possible. At the same time, unlike speculativeside-channel attacks, MicroScope can be used to amplify the correct path ofexecution, rendering many existing speculative side-channel defencesineffective.  In this work, we generalize microarchitectural replay attacks beyondMicroScope and present an efficient defence against them. We make theobservation that such attacks rely on repeated squashes of so-called "replayhandles" and that the instructions causing the side-channel must reside in thesame reorder buffer window as the handles. We propose Delay-on-Squash, atechnique for tracking squashed instructions and preventing them from beingreplayed by speculative replay handles. Our evaluation shows that it ispossible to achieve full security against microarchitectural replay attackswith very modest hardware requirements, while still maintaining 97% of theinsecure baseline performance.

Selectively Delaying Instructions to Prevent Microarchitectural Replay Attacks