权益分类	功能权益	普通用户	{{item.name}}会员
{{category.name}}	{{benefitItem.name}}

CRII: SaTC: Mitigating Software-Based Microarchitectural Attacks via Secure Microcode Customization

CRII：SaTC：通过安全微代码定制缓解基于软件的微架构攻击

基本信息

批准号：
1850436
负责人：
Ashish Venkat
金额：
$ 17.5万
依托单位：
University of Virginia Main Campus
依托单位国家：
美国
项目类别：
Standard Grant
财政年份：
2019
资助国家：
美国
起止时间：
2019-03-01 至 2022-02-28
项目状态：
已结题

来源：
https://www.nsf.gov/awardsearch/showAward?AWD_ID=1850436&HistoricalAwards=false
关键词：
CRII SaTC Mitigating Software Based

项目摘要

Modern high-performance processors implement complex microarchitectural optimizations involving speculative execution which has recently been shown to be vulnerable to a type of malicious attack called Spectre. This project will investigate a microarchitectural solution framework to secure against such attacks. This framework, called context-sensitive fencing, will seek to automatically track and detect malicious execution patterns dynamically to trigger defense code without programmer intervention and with minimal impact on processor performance.This research will investigate a high performance defense strategy with three novel components: (a) secure microcode customization which leverages the processor's microcode engine to enable the surgical injection of Spectre defense code (e.g., speculation fences) into the dynamic instruction stream without the need for software patching, (b) a decoder-level information flow tracking framework which detects spurious execution patterns that result in the mis-training of core microprocessor structures such as the branch predictor, and (c) microarchitecture hardening mechanisms that shield sensitive microarchitectural structures against the malicious side effects of speculative execution, to further enable a security-aware processor architecture design.The reconfigurable microcode-level defense proposed by this research may address the Spectre attack which affects millions of users. This project will train and mentor graduate and undergraduate students and is expected to facilitate development of a hardware security course to be delivered in-class and online.The results from this research will be disseminated in the form of publications, presentations, design reports, course materials, and source code, and will be hosted publicly for the length of this project and beyond, on the investigator's website at http://www.cs.virginia.edu/venkat.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

现代高性能处理器实现了复杂的微架构优化，涉及投机执行，最近已被证明容易受到一种称为Spectre的恶意攻击。这个项目将研究一个微架构的解决方案框架，以防止这种攻击。这个框架被称为上下文敏感的屏蔽，它将寻求自动跟踪和动态检测恶意执行模式，以触发防御代码，而无需程序员干预，并且对处理器性能的影响最小。这项研究将研究一种高性能的防御策略，包括三个新组件：（a）安全微代码定制，其利用处理器的微代码引擎来实现Spectre防御代码的外科手术注入（例如，推测栅栏）进入动态指令流而不需要软件修补，（B）解码器级信息流跟踪框架，其检测导致核心微处理器结构（例如分支预测器）的误训练的伪执行模式，以及（c）微体系结构硬化机制，其屏蔽敏感的微体系结构免受推测执行的恶意副作用，以进一步实现安全感知的处理器架构设计。本研究提出的可重配置微代码级防御可以解决影响数百万用户的Spectre攻击。该项目将培训和指导研究生和本科生，并有望促进硬件安全课程的开发，该课程将在课堂上和在线上提供。该研究的结果将以出版物、演示文稿、设计报告、课程材料和源代码的形式传播，并将在该项目期间及以后公开托管在调查员的网站http://www.cs.virginia.edu/venkat.This。NSF的法定使命，并已被认为是值得通过使用基金会的知识价值和更广泛的影响审查标准进行评估的支持。

项目成果

期刊论文数量（4）

专著数量（0）

科研奖励数量（0）

会议论文数量（0）

专利数量（0）

Context-Sensitive Fencing: Securing Speculative Execution via Microcode Customization

DOI：
10.1145/3297858.3304060
发表时间：
2019-04
期刊：
Proceedings of the Twenty-Fourth International Conference on Architectural Support for Programming Languages and Operating Systems
影响因子：
0
作者：
Mohammadkazem Taram;A. Venkat;D. Tullsen
通讯作者：
Mohammadkazem Taram;A. Venkat;D. Tullsen

Mitigating Speculative Execution Attacks via Context-Sensitive Fencing

通过上下文敏感防护减轻推测执行攻击

DOI：
10.1109/mdat.2022.3152633
发表时间：
2022
期刊：
IEEE Design & Test
影响因子：
2
作者：
Taram, Mohammadkazem;Venkat, Ashish;Tullsen, Dean
通讯作者：
Tullsen, Dean

Context-Sensitive Decoding: On-Demand Microcode Customization for Security and Energy Management

上下文相关解码：用于安全和能源管理的按需微代码定制

DOI：
10.1109/mm.2019.2910507
发表时间：
2019
期刊：
IEEE Micro
影响因子：
3.6
作者：
Taram, Mohammadkazem;Venkat, Ashish;Tullsen, Dean M.
通讯作者：
Tullsen, Dean M.

I See Dead µops: Leaking Secrets via Intel/AMD Micro-Op Caches

我看到死微操作：通过 Intel/AMD 微操作缓存泄露秘密

DOI：
10.1109/isca52012.2021.00036
发表时间：
2021
期刊：
2021 ACM/IEEE 48th Annual International Symposium on Computer Architecture (ISCA
影响因子：
0
作者：
Ren, Xida;Moody, Logan;Taram, Mohammadkazem;Jordan, Matthew;Tullsen, Dean M.;Venkat, Ashish
通讯作者：
Venkat, Ashish