Out-of-order speculation, a technique ubiquitous since the early 1990s, remains a
fundamental security flaw. Via attacks such as Spectre and Meltdown, an attacker can trick a …

Leaking a program's instruction address (PC) pattern, completely and precisely, has long
been a sought-after capability for microarchitectural side-channel attackers. Case in point …

Recently exposed vulnerabilities reveal that branch predictors shared by different processes
leave the attackers with the opportunities for malicious training and perception. Instead of …

Transient execution attacks that exploit speculation have raised significant concerns in
computer systems. Typically, branch predictors are leveraged to trigger mis-speculation in …

This paper introduces novel high-precision Branch Target Injection (BTI) attacks, leveraging
the intricate structures of the Indirect Branch Predictor (IBP) and the Branch Target Buffer …

Recently exposed vulnerabilities reveal the necessity to improve the security of branch
predictors. Branch predictors record history about the execution of different processes, and …

This paper introduces novel attack primitives that enable adversaries to leak (read) and
manipulate (write) the path history register (PHR) and the prediction history tables (PHTs) of …

Microarchitectural optimizations are expected to play a crucial role in ensuring performance
scalability in the post-Moore era. However, recent attacks have demonstrated that these …

In a modern processor, branch prediction is crucial in effectively exploiting the instruction-
level parallelism for high-performance execution. However, recently exposed vulnerabilities …

This paper presents a comprehensive investigation into the security vulnerabilities
associated with speculative memory access on AMD processors. Firstly, employing novel …