{"id":"https://openalex.org/W4320025539","doi":"https://doi.org/10.1109/asianhost56390.2022.10022280","title":"PMU-Spill: Performance Monitor Unit Counters Leak Secrets in Transient Executions","display_name":"PMU-Spill: Performance Monitor Unit Counters Leak Secrets in Transient Executions","publication_year":2022,"publication_date":"2022-12-14","ids":{"openalex":"https://openalex.org/W4320025539","doi":"https://doi.org/10.1109/asianhost56390.2022.10022280"},"language":"en","primary_location":{"id":"doi:10.1109/asianhost56390.2022.10022280","is_oa":false,"landing_page_url":"https://doi.org/10.1109/asianhost56390.2022.10022280","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 Asian Hardware Oriented Security and Trust Symposium (AsianHOST)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5069202094","display_name":"Pengfei Qiu","orcid":"https://orcid.org/0000-0001-8644-1445"},"institutions":[{"id":"https://openalex.org/I4210139618","display_name":"Shanghai Key Laboratory of Trustworthy Computing","ror":"https://ror.org/030qbr085","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210139618"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Pengfei Qiu","raw_affiliation_strings":["Tsinghua University,Key Laboratory of Trustworthy Distributed Computing and Service (BUPT), Ministry of Education,Beijing,China","Key Laboratory of Trustworthy Distributed Computing and Service (BUPT), Ministry of Education, Tsinghua University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University,Key Laboratory of Trustworthy Distributed Computing and Service (BUPT), Ministry of Education,Beijing,China","institution_ids":["https://openalex.org/I4210139618","https://openalex.org/I99065089"]},{"raw_affiliation_string":"Key Laboratory of Trustworthy Distributed Computing and Service (BUPT), Ministry of Education, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I4210139618","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075905329","display_name":"Qiang Gao","orcid":"https://orcid.org/0000-0001-7860-6692"},"institutions":[{"id":"https://openalex.org/I4210139618","display_name":"Shanghai Key Laboratory of Trustworthy Computing","ror":"https://ror.org/030qbr085","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210139618"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiang Gao","raw_affiliation_strings":["Tsinghua University,Key Laboratory of Trustworthy Distributed Computing and Service (BUPT), Ministry of Education,Beijing,China","Key Laboratory of Trustworthy Distributed Computing and Service (BUPT), Ministry of Education, Tsinghua University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University,Key Laboratory of Trustworthy Distributed Computing and Service (BUPT), Ministry of Education,Beijing,China","institution_ids":["https://openalex.org/I4210139618","https://openalex.org/I99065089"]},{"raw_affiliation_string":"Key Laboratory of Trustworthy Distributed Computing and Service (BUPT), Ministry of Education, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I4210139618","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100450575","display_name":"Dongsheng Wang","orcid":"https://orcid.org/0000-0001-5779-9026"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dongsheng Wang","raw_affiliation_strings":["Tsinghua University,Beijing National Research Center for Information Science and Technology,Department of Computer Science and Technology,Beijing,China","Department of Computer Science and Technology, Beijing National Research Center for Information Science and Technology, Tsinghua University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University,Beijing National Research Center for Information Science and Technology,Department of Computer Science and Technology,Beijing,China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Department of Computer Science and Technology, Beijing National Research Center for Information Science and Technology, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058507537","display_name":"Yongqiang Lyu","orcid":"https://orcid.org/0000-0003-2573-963X"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yongqiang Lyu","raw_affiliation_strings":["Tsinghua University,Beijing National Research Center for Information Science and Technology,Department of Computer Science and Technology,Beijing,China","Department of Computer Science and Technology, Beijing National Research Center for Information Science and Technology, Tsinghua University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University,Beijing National Research Center for Information Science and Technology,Department of Computer Science and Technology,Beijing,China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Department of Computer Science and Technology, Beijing National Research Center for Information Science and Technology, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100353239","display_name":"Chang Liu","orcid":"https://orcid.org/0000-0002-3721-3902"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chang Liu","raw_affiliation_strings":["Tsinghua University,Beijing National Research Center for Information Science and Technology,Department of Computer Science and Technology,Beijing,China","Department of Computer Science and Technology, Beijing National Research Center for Information Science and Technology, Tsinghua University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University,Beijing National Research Center for Information Science and Technology,Department of Computer Science and Technology,Beijing,China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Department of Computer Science and Technology, Beijing National Research Center for Information Science and Technology, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100673949","display_name":"Xiaoyong Li","orcid":"https://orcid.org/0000-0001-5597-9306"},"institutions":[{"id":"https://openalex.org/I4210139618","display_name":"Shanghai Key Laboratory of Trustworthy Computing","ror":"https://ror.org/030qbr085","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210139618"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoyong Li","raw_affiliation_strings":["Key Laboratory of Trustworthy Distributed Computing and Service (BUPT),Ministry of Education,Beijing,China","Ministry of Education, Key Laboratory of Trustworthy Distributed Computing and Service (BUPT), Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Key Laboratory of Trustworthy Distributed Computing and Service (BUPT),Ministry of Education,Beijing,China","institution_ids":["https://openalex.org/I4210139618"]},{"raw_affiliation_string":"Ministry of Education, Key Laboratory of Trustworthy Distributed Computing and Service (BUPT), Beijing, China","institution_ids":["https://openalex.org/I4210139618"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044874015","display_name":"Chunlu Wang","orcid":"https://orcid.org/0000-0002-0343-5830"},"institutions":[{"id":"https://openalex.org/I4210139618","display_name":"Shanghai Key Laboratory of Trustworthy Computing","ror":"https://ror.org/030qbr085","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210139618"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chunlu Wang","raw_affiliation_strings":["Key Laboratory of Trustworthy Distributed Computing and Service (BUPT),Ministry of Education,Beijing,China","Ministry of Education, Key Laboratory of Trustworthy Distributed Computing and Service (BUPT), Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Key Laboratory of Trustworthy Distributed Computing and Service (BUPT),Ministry of Education,Beijing,China","institution_ids":["https://openalex.org/I4210139618"]},{"raw_affiliation_string":"Ministry of Education, Key Laboratory of Trustworthy Distributed Computing and Service (BUPT), Beijing, China","institution_ids":["https://openalex.org/I4210139618"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5012474783","display_name":"Gang Qu","orcid":"https://orcid.org/0000-0001-6759-8949"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gang Qu","raw_affiliation_strings":["Institute for Systems Research, University of Maryland,Department of Electrical and Computer Engineering,Maryland,USA","Department of Electrical and Computer Engineering, Institute for Systems Research, University of Maryland, Maryland, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute for Systems Research, University of Maryland,Department of Electrical and Computer Engineering,Maryland,USA","institution_ids":["https://openalex.org/I66946132"]},{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Institute for Systems Research, University of Maryland, Maryland, USA","institution_ids":["https://openalex.org/I66946132"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9929999709129333,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9879000186920166,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7920627593994141},{"id":"https://openalex.org/keywords/guard","display_name":"Guard (computer science)","score":0.7749429941177368},{"id":"https://openalex.org/keywords/transient","display_name":"Transient (computer programming)","score":0.5670077800750732},{"id":"https://openalex.org/keywords/byte","display_name":"Byte","score":0.5666453242301941},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5309799313545227},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.4747115671634674},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.43481940031051636},{"id":"https://openalex.org/keywords/profiling","display_name":"Profiling (computer programming)","score":0.41224104166030884},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.37339553236961365}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7920627593994141},{"id":"https://openalex.org/C141141315","wikidata":"https://www.wikidata.org/wiki/Q2379942","display_name":"Guard (computer science)","level":2,"score":0.7749429941177368},{"id":"https://openalex.org/C2780799671","wikidata":"https://www.wikidata.org/wiki/Q17087362","display_name":"Transient (computer programming)","level":2,"score":0.5670077800750732},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.5666453242301941},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5309799313545227},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.4747115671634674},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.43481940031051636},{"id":"https://openalex.org/C187191949","wikidata":"https://www.wikidata.org/wiki/Q1138496","display_name":"Profiling (computer programming)","level":2,"score":0.41224104166030884},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.37339553236961365},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/asianhost56390.2022.10022280","is_oa":false,"landing_page_url":"https://doi.org/10.1109/asianhost56390.2022.10022280","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 Asian Hardware Oriented Security and Trust Symposium (AsianHOST)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5600000023841858,"id":"https://metadata.un.org/sdg/11","display_name":"Sustainable cities and communities"}],"awards":[{"id":"https://openalex.org/G3477364470","display_name":null,"funder_award_id":"2021YFB3100902","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G3615144269","display_name":null,"funder_award_id":"62072263,62102214","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W2024540116","https://openalex.org/W2064472118","https://openalex.org/W2199175040","https://openalex.org/W2606774910","https://openalex.org/W2768516003","https://openalex.org/W2807403537","https://openalex.org/W2897675008","https://openalex.org/W2954241526","https://openalex.org/W2963311060","https://openalex.org/W2976763854","https://openalex.org/W2990246449","https://openalex.org/W3008727730","https://openalex.org/W3095391095","https://openalex.org/W3100860658","https://openalex.org/W4299301436","https://openalex.org/W6629297748","https://openalex.org/W6725368715","https://openalex.org/W6753443810","https://openalex.org/W6754306559"],"related_works":["https://openalex.org/W121858127","https://openalex.org/W2775143306","https://openalex.org/W4254637722","https://openalex.org/W2980401999","https://openalex.org/W3016483420","https://openalex.org/W2331628363","https://openalex.org/W2393030234","https://openalex.org/W4289329995","https://openalex.org/W2373574911","https://openalex.org/W2046727832"],"abstract_inverted_index":{"The":[0],"processor's":[1],"Performance":[2],"Monitor":[3],"Unit":[4],"(PMU)":[5],"allows":[6],"the":[7,27,46,61,78,98,120,143],"recording":[8,36],"of":[9,35,53,106,122,139],"architectural":[10],"and":[11,102],"microarchitectural":[12],"events":[13,38],"for":[14],"profiling":[15],"purposes.":[16],"In":[17,88],"this":[18],"study,":[19],"we":[20,90],"reveal":[21,96],"a":[22,50,92],"security":[23],"issue":[24],"caused":[25],"by":[26],"fact":[28],"that":[29,39,55,72,104,119],"current":[30],"PMU":[31,47,73,100,113,123],"implementations":[32],"are":[33],"capable":[34],"some":[37],"happened":[40],"during":[41],"transient":[42,65],"executions.":[43,66],"We":[44,67],"propose":[45],"-Spill":[48,74,114,124],"attack,":[49],"new":[51],"kind":[52],"attack":[54,75,125],"enables":[56],"attackers":[57],"to":[58,95,111,128],"maliciously":[59],"leak":[60,77],"secret":[62,79,145],"data":[63,80],"in":[64,82],"demonstrate":[68],"on":[69],"real":[70],"hardware":[71],"can":[76,108],"stored":[81],"Intel":[83],"Software":[84],"Guard":[85],"Extensions":[86],"(SGX).":[87],"addition,":[89],"perform":[91],"thorough":[93],"study":[94],"all":[97],"vulnerable":[99],"counters":[101],"find":[103],"20":[105],"them":[107],"be":[109],"used":[110],"achieve":[112],"attack.":[115],"Our":[116],"experiments":[117],"suggest":[118],"throughput":[121],"is":[126],"up":[127],"575.3":[129],"bytes":[130],"per":[131],"second":[132],"(Bps)":[133],"with":[134],"an":[135],"average":[136],"error":[137],"rate":[138],"1.89%":[140],"when":[141],"leaking":[142],"SGX-protected":[144],"data.":[146]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2023,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}