TL;DR
GhostMinion introduces a novel cache system implementing Strictness Ordering to effectively mitigate Spectre attacks while maintaining high performance with only 2.5% overhead.
Contribution
The paper proposes Strictness Ordering as a new constraint system and presents GhostMinion, a cache modification that achieves comprehensive Spectre mitigation with minimal performance impact.
Findings
Effectively eliminates transient side channel attacks.
Achieves only 2.5% performance overhead.
Supports complex speculation and data forwarding.
Abstract
Out-of-order speculation, a technique ubiquitous since the early 1990s, remains a fundamental security flaw. Via attacks such as Spectre and Meltdown, an attacker can trick a victim, in an otherwise entirely correct program, into leaking its secrets through the effects of misspeculated execution, in a way that is entirely invisible to the programmer's model. This has serious implications for application sandboxing and inter-process communication. Designing efficient mitigations, that preserve the performance of out-of-order execution, has been a challenge. The speculation-hiding techniques in the literature have been shown to not close such channels comprehensively, allowing adversaries to redesign attacks. Strong, precise guarantees are necessary, but at the same time mitigations must achieve high performance to be adopted. We present Strictness Ordering, a new constraint system that…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Code & Models
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
