Modern superscalar CPUs have multiple execution units that independently execute
operations from the instruction stream. Previous work has shown that numerous side …

Microarchitectural attacks typically rely on precise timing sources to uncover short-lived
secret-dependent activity in the processor. In response, many browsers and even CPU …

Side-channel attacks pose serious threats to many security models, especially sandbox-
based browsers. While transient-execution side channels in out-of-order processors have …

Speculative side-channel attacks have forced computer architects to rethink speculative
execution. Effectively preventing microarchitectural state from leaking sensitive information …

In a speculative side-channel attack, a secret is improperly accessed and then leaked by
passing it to a transmitter instruction. Several proposed defenses effectively close this …

Control-flow leakage (CFL) attacks enable an attacker to expose control-flow decisions of a
victim program via side-channel observations. Linearization (ie elimination) of secret …

Microarchitectural optimizations are expected to play a crucial role in ensuring performance
scalability in the post-Moore era. However, recent attacks have demonstrated that these …

Although the cache has been a known side-channel for years, it has gained renewed
notoriety with the introduction of speculative side-channel attacks such as Spectre, which …

Clueless is a binary instrumentation tool that characterises explicit cache side channel
vulnerabilities of programs. It detects the transformation of data values into addresses by …

Transient execution attacks like Spectre and its vari-ants can cause information leakage
through a cache hierarchy. There are two classes of techniques that mitigate speculative …