2018/05/22 by Oleksii Oleksenko, Bohdan Trach, Oleksenko, Oleksii +7 · 1 voice
Computer Science · #Advanced Malware Detection Techniques #Cryptography and Security (cs.CR) #FOS: Computer and information sciences #Parallel Computing and Optimization Techniques #Security and Verification in Computing #cs.CR
paper · pdf · doi:10.48550/arxiv.1805.08506
openalex publication_date 2018/05/22 · arxiv published 2018/05/22 · arxiv created 2018/10/10 · arxiv updated 2018/10/11 · openalex created_date 2022/08/28 · openalex updated_date 2026/07/28
A recent discovery of a new class of microarchitectural attacks called Spectre picked up the attention of the security community as these attacks can circumvent many traditional mechanisms of defense. One of the attacks---Bounds Check Bypass---can neither be efficiently solved on system nor architectural levels and requires changes in the application itself. So far, the proposed mitigations involved serialization, which reduces the usage of CPU resources and causes high overheads. In this report, we explore methods of delaying the vulnerable instructions without complete serialization. We discuss several ways of achieving it and compare them with Speculative Load Hardening, an existing solution based on a similar idea. The solutions of this type cause 60% overhead across Phoenix benchmark suite, which compares favorably to the full serialization causing 440% slowdown.