{"id":"https://openalex.org/W3136898164","doi":"https://doi.org/10.14722/ndss.2021.24286","title":"Hunting the Haunter \u2014 Efficient Relational Symbolic Execution for Spectre with Haunted RelSE","display_name":"Hunting the Haunter \u2014 Efficient Relational Symbolic Execution for Spectre with Haunted RelSE","publication_year":2021,"publication_date":"2021-01-01","ids":{"openalex":"https://openalex.org/W3136898164","doi":"https://doi.org/10.14722/ndss.2021.24286","mag":"3136898164"},"language":"en","primary_location":{"id":"doi:10.14722/ndss.2021.24286","doi":"https://doi.org/10.14722/ndss.2021.24286","is_oa":true,"landing_page_url":"https://doi.org/10.14722/ndss.2021.24286","pdf_url":"https://doi.org/10.14722/ndss.2021.24286","source":{"id":"https://openalex.org/S4306420590","display_name":"Network and Distributed System Security Symposium","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings 2021 Network and Distributed System Security Symposium","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://doi.org/10.14722/ndss.2021.24286","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5089892476","display_name":"Lesly-Ann Daniel","orcid":"https://orcid.org/0000-0002-2772-3722","observed_orcids":["https://orcid.org/0000-0002-2772-3722"]},"institutions":[{"id":"https://openalex.org/I2738703131","display_name":"Commissariat \u00e0 l'\u00c9nergie Atomique et aux \u00c9nergies Alternatives","ror":"https://ror.org/00jjx8s55","country_code":"FR","type":"government","lineage":["https://openalex.org/I2738703131"]},{"id":"https://openalex.org/I277688954","display_name":"Universit\u00e9 Paris-Saclay","ror":"https://ror.org/03xjwb503","country_code":"FR","type":"education","lineage":["https://openalex.org/I277688954"]},{"id":"https://openalex.org/I2801360556","display_name":"CEA Paris-Saclay - Etablissement de Saclay","ror":"https://ror.org/01fv25t22","country_code":"FR","type":"facility","lineage":["https://openalex.org/I2738703131","https://openalex.org/I277688954","https://openalex.org/I2801360556","https://openalex.org/I4210128565"]},{"id":"https://openalex.org/I4210085861","display_name":"Laboratoire d'Int\u00e9gration des Syst\u00e8mes et des Technologies","ror":"https://ror.org/000dbcc61","country_code":"FR","type":"government","lineage":["https://openalex.org/I2738703131","https://openalex.org/I277688954","https://openalex.org/I4210085861","https://openalex.org/I4210117989"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Lesly-Ann Daniel","raw_affiliation_strings":["Universit\u00e9 Paris-Saclay , CEA , List","Laboratoire d'Int\u00e9gration des Syst\u00e8mes et des Technologies"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universit\u00e9 Paris-Saclay , CEA , List","institution_ids":["https://openalex.org/I2738703131","https://openalex.org/I277688954","https://openalex.org/I2801360556","https://openalex.org/I4210085861"]},{"raw_affiliation_string":"Laboratoire d'Int\u00e9gration des Syst\u00e8mes et des Technologies","institution_ids":["https://openalex.org/I4210085861"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018746962","display_name":"S\u00e9bastien Bardin","orcid":"https://orcid.org/0000-0002-6509-3506","observed_orcids":["https://orcid.org/0000-0002-6509-3506"]},"institutions":[{"id":"https://openalex.org/I2738703131","display_name":"Commissariat \u00e0 l'\u00c9nergie Atomique et aux \u00c9nergies Alternatives","ror":"https://ror.org/00jjx8s55","country_code":"FR","type":"government","lineage":["https://openalex.org/I2738703131"]},{"id":"https://openalex.org/I277688954","display_name":"Universit\u00e9 Paris-Saclay","ror":"https://ror.org/03xjwb503","country_code":"FR","type":"education","lineage":["https://openalex.org/I277688954"]},{"id":"https://openalex.org/I2801360556","display_name":"CEA Paris-Saclay - Etablissement de Saclay","ror":"https://ror.org/01fv25t22","country_code":"FR","type":"facility","lineage":["https://openalex.org/I2738703131","https://openalex.org/I277688954","https://openalex.org/I2801360556","https://openalex.org/I4210128565"]},{"id":"https://openalex.org/I4210085861","display_name":"Laboratoire d'Int\u00e9gration des Syst\u00e8mes et des Technologies","ror":"https://ror.org/000dbcc61","country_code":"FR","type":"government","lineage":["https://openalex.org/I2738703131","https://openalex.org/I277688954","https://openalex.org/I4210085861","https://openalex.org/I4210117989"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"S\u00e9bastien Bardin","raw_affiliation_strings":["Universit\u00e9 Paris-Saclay CEA , List","Laboratoire d'Int\u00e9gration des Syst\u00e8mes et des Technologies"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universit\u00e9 Paris-Saclay CEA , List","institution_ids":["https://openalex.org/I2738703131","https://openalex.org/I277688954","https://openalex.org/I2801360556","https://openalex.org/I4210085861"]},{"raw_affiliation_string":"Laboratoire d'Int\u00e9gration des Syst\u00e8mes et des Technologies","institution_ids":["https://openalex.org/I4210085861"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5087729716","display_name":"Tamara Rezk","orcid":"https://orcid.org/0000-0003-3744-0248","observed_orcids":["https://orcid.org/0000-0003-3744-0248"]},"institutions":[{"id":"https://openalex.org/I1326498283","display_name":"Institut national de recherche en sciences et technologies du num\u00e9rique","ror":"https://ror.org/02kvxyf05","country_code":"FR","type":"government","lineage":["https://openalex.org/I1326498283"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Tamara Rezk","raw_affiliation_strings":["Inria","Secure Diffuse Programming"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Inria","institution_ids":["https://openalex.org/I1326498283"]},{"raw_affiliation_string":"Secure Diffuse Programming","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.0601,"has_fulltext":true,"cited_by_count":38,"citation_normalized_percentile":{"value":0.95463691,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9750999808311462,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9750999808311462,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.020400000736117363,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.002199999988079071,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/spectre","display_name":"Spectre","score":0.7649999856948853},{"id":"https://openalex.org/keywords/speculative-execution","display_name":"speculative execution","score":0.6520000100135803},{"id":"https://openalex.org/keywords/microarchitectural-attacks","display_name":"microarchitectural attacks","score":0.8700000047683716},{"id":"https://openalex.org/keywords/cryptographic-libraries","display_name":"cryptographic libraries","score":0.640999972820282},{"id":"https://openalex.org/keywords/vulnerability-detection","display_name":"vulnerability detection","score":0.8029999732971191},{"id":"https://openalex.org/keywords/binary-code-analysis","display_name":"binary analysis","score":0.5139999985694885}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8557347059249878},{"id":"https://openalex.org/C157329479","wikidata":"https://www.wikidata.org/wiki/Q185082","display_name":"Litmus","level":2,"score":0.7577078342437744},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.6363630294799805},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.6325554847717285},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.5953379273414612},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5547409057617188},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.4957598149776459},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.45900651812553406},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.43080437183380127},{"id":"https://openalex.org/C2777402240","wikidata":"https://www.wikidata.org/wiki/Q6783436","display_name":"Masking (illustration)","level":2,"score":0.41949141025543213},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.382202684879303},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.09429964423179626},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C147789679","wikidata":"https://www.wikidata.org/wiki/Q11372","display_name":"Physical chemistry","level":1,"score":0.0},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.14722/ndss.2021.24286","doi":"https://doi.org/10.14722/ndss.2021.24286","is_oa":true,"landing_page_url":"https://doi.org/10.14722/ndss.2021.24286","pdf_url":"https://doi.org/10.14722/ndss.2021.24286","source":{"id":"https://openalex.org/S4306420590","display_name":"Network and Distributed System Security Symposium","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings 2021 Network and Distributed System Security Symposium","raw_type":"proceedings-article"},{"id":"pmh:oai:HAL:hal-03363263v1","doi":null,"is_oa":true,"landing_page_url":"https://inria.hal.science/hal-03363263","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4405252976","host_organization_name":"Centre pour la Communication Scientifique Directe","host_organization_lineage":["https://openalex.org/I4405252976"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"NDSS 2021 - Network and Distributed Systems Security, 2021, Virtual, France. ⟨10.14722/ndss.2021.24286⟩","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"doi:10.14722/ndss.2021.24286","doi":"https://doi.org/10.14722/ndss.2021.24286","is_oa":true,"landing_page_url":"https://doi.org/10.14722/ndss.2021.24286","pdf_url":"https://doi.org/10.14722/ndss.2021.24286","source":{"id":"https://openalex.org/S4306420590","display_name":"Network and Distributed System Security Symposium","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings 2021 Network and Distributed System Security Symposium","raw_type":"proceedings-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G5740443420","display_name":"Certification of IoT Secure Compilation","funder_award_id":"ANR-17-CE25-0014","funder_id":"https://openalex.org/F4320320883","funder_display_name":"Agence Nationale de la Recherche"},{"id":"https://openalex.org/G8634031762","display_name":"Toward Automated Vulnerability Analysis","funder_award_id":"ANR-20-CE25-0009","funder_id":"https://openalex.org/F4320320883","funder_display_name":"Agence Nationale de la Recherche"}],"funders":[{"id":"https://openalex.org/F4320313716","display_name":"Canadian Institute of Steel Construction","ror":"https://ror.org/04w9bz196"},{"id":"https://openalex.org/F4320313934","display_name":"Institut national de recherche en informatique et en automatique (INRIA)","ror":"https://ror.org/02kvxyf05"},{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320320883","display_name":"Agence Nationale de la Recherche","ror":"https://ror.org/00rbzpz17"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3136898164.pdf","grobid_xml":"https://content.openalex.org/works/W3136898164.grobid-xml"},"referenced_works_count":36,"referenced_works":["https://openalex.org/W49922133","https://openalex.org/W157156687","https://openalex.org/W174339829","https://openalex.org/W1585877844","https://openalex.org/W1613874182","https://openalex.org/W1710734607","https://openalex.org/W1979693894","https://openalex.org/W2101512909","https://openalex.org/W2347205253","https://openalex.org/W2402906095","https://openalex.org/W2408027109","https://openalex.org/W2514974017","https://openalex.org/W2753573171","https://openalex.org/W2768373486","https://openalex.org/W2781723315","https://openalex.org/W2860564492","https://openalex.org/W2868863044","https://openalex.org/W2884163605","https://openalex.org/W2884364581","https://openalex.org/W2886207505","https://openalex.org/W2903725623","https://openalex.org/W2906755653","https://openalex.org/W2925685215","https://openalex.org/W2942404474","https://openalex.org/W2962722502","https://openalex.org/W2964281551","https://openalex.org/W2964590009","https://openalex.org/W2972034624","https://openalex.org/W2982776349","https://openalex.org/W2985509521","https://openalex.org/W2996406529","https://openalex.org/W3020825203","https://openalex.org/W3090475639","https://openalex.org/W3096867085","https://openalex.org/W3159715284","https://openalex.org/W3160978791"],"related_works":["https://openalex.org/W4214643217","https://openalex.org/W4310273895","https://openalex.org/W4407858114","https://openalex.org/W2903725623","https://openalex.org/W2883654550","https://openalex.org/W3137153123","https://openalex.org/W2985509521","https://openalex.org/W4406256194","https://openalex.org/W4384948650","https://openalex.org/W7166654870"],"abstract_inverted_index":{"Spectre":[0,21,40,69,86],"are":[1],"microarchitectural":[2],"attacks":[3],"which":[4,135],"were":[5],"made":[6],"public":[7],"in":[8,105,111,208],"January":[9],"2018.They":[10],"allow":[11],"an":[12,76],"attacker":[13],"to":[14,48,64,158,172,185,187],"recover":[15],"secrets":[16],"by":[17,56],"exploiting":[18],"speculations.Detection":[19],"of":[20,51,67,85],"is":[22,201],"particularly":[23],"important":[24],"for":[25,125,133,167],"cryptographic":[26,152],"libraries":[27,153],"and":[28,39,59,116,127,142,148,154,181],"defenses":[29,37],"at":[30,71,88],"the":[31,49,52,61,65,92,97,189],"software":[32],"level":[33],"have":[34],"been":[35],"proposed.Yet,":[36],"correctness":[38],"detection":[41,84],"pose":[42],"challenges":[43],"due":[44],"on":[45,60,120,128,198],"one":[46],"hand":[47,63],"explosion":[50],"exploration":[53,102],"space":[54],"induced":[55],"speculative":[57,101],"paths,":[58],"other":[62],"introduction":[66],"new":[68,130,156],"vulnerabilities":[70,87],"different":[72],"compilation":[73],"stages.We":[74],"propose":[75,180],"optimization,":[77],"coined":[78],"Haunted":[79,109],"RelSE,":[80],"that":[81,163,195],"allows":[82],"scalable":[83],"binary":[89,199],"level.We":[90],"prove":[91],"optimization":[93],"semantically":[94],"correct":[95],"w.r.t.":[96],"more":[98,140],"naive":[99],"explicit":[100],"approach":[103],"used":[104],"state-of-the-art":[106,146],"tools.We":[107],"implement":[108],"RelSE":[110],"a":[112,121,129,183],"symbolic":[113,202],"analysis":[114,193],"tool,":[115,160],"extensively":[117],"test":[118],"it":[119],"wellknown":[122],"litmus":[123,131],"testset":[124,132],"Spectre-PHT,":[126],"Spectre-STL,":[134],"we":[136,161],"propose.Our":[137],"technique":[138,194],"finds":[139],"violations":[141],"scales":[143,196],"better":[144],"than":[145],"techniques":[147],"tools,":[149],"analyzing":[150],"real-world":[151],"finding":[155],"violations.Thanks":[157],"our":[159],"discover":[162],"indexmasking-a":[164],"standard":[165],"defense":[166],"Spectre-PHT-and":[168],"well-known":[169,192],"gcc":[170],"options":[171],"compile":[173],"position":[174],"independent":[175],"executables":[176],"introduce":[177],"Spectre-STL":[178],"violations.We":[179],"verify":[182],"correction":[184],"index-masking":[186],"avoid":[188],"problem.":[190],"A":[191],"well":[197],"code":[200],"execution":[203],"(SE)":[204],"[17],":[205],"[18].":[206],"However,":[207],"order":[209]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":8},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":6}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2021-03-29T00:00:00"}