{"id":"https://openalex.org/W4200476785","doi":"https://doi.org/10.1109/iccad51958.2021.9643462","title":"Bounded Model Checking of Speculative Non-Interference","display_name":"Bounded Model Checking of Speculative Non-Interference","publication_year":2021,"publication_date":"2021-11-01","ids":{"openalex":"https://openalex.org/W4200476785","doi":"https://doi.org/10.1109/iccad51958.2021.9643462"},"language":"en","primary_location":{"id":"doi:10.1109/iccad51958.2021.9643462","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iccad51958.2021.9643462","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE/ACM International Conference On Computer Aided Design (ICCAD)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5007110554","display_name":"Emmanuel Pescosta","orcid":null},"institutions":[{"id":"https://openalex.org/I145847075","display_name":"TU Wien","ror":"https://ror.org/04d836q62","country_code":"AT","type":"education","lineage":["https://openalex.org/I145847075"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Emmanuel Pescosta","raw_affiliation_strings":["TU Wien,Vienna,Austria","TU Wien, Vienna, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"TU Wien,Vienna,Austria","institution_ids":["https://openalex.org/I145847075"]},{"raw_affiliation_string":"TU Wien, Vienna, Austria","institution_ids":["https://openalex.org/I145847075"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017958562","display_name":"Georg Wei\u00dfenbacher","orcid":"https://orcid.org/0000-0002-0143-632X"},"institutions":[{"id":"https://openalex.org/I145847075","display_name":"TU Wien","ror":"https://ror.org/04d836q62","country_code":"AT","type":"education","lineage":["https://openalex.org/I145847075"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Georg Weissenbacher","raw_affiliation_strings":["TU Wien,Vienna,Austria","TU Wien, Vienna, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"TU Wien,Vienna,Austria","institution_ids":["https://openalex.org/I145847075"]},{"raw_affiliation_string":"TU Wien, Vienna, Austria","institution_ids":["https://openalex.org/I145847075"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5063337176","display_name":"Florian Zuleger","orcid":"https://orcid.org/0000-0003-1468-8398"},"institutions":[{"id":"https://openalex.org/I145847075","display_name":"TU Wien","ror":"https://ror.org/04d836q62","country_code":"AT","type":"education","lineage":["https://openalex.org/I145847075"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Florian Zuleger","raw_affiliation_strings":["TU Wien,Vienna,Austria","TU Wien, Vienna, Austria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"TU Wien,Vienna,Austria","institution_ids":["https://openalex.org/I145847075"]},{"raw_affiliation_string":"TU Wien, Vienna, Austria","institution_ids":["https://openalex.org/I145847075"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I145847075"],"apc_list":null,"apc_paid":null,"fwci":0.4396,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.64279293,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"9"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9926999807357788,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11005","display_name":"Radiation Effects in Electronics","score":0.9855999946594238,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8509154915809631},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6683251261711121},{"id":"https://openalex.org/keywords/speculative-execution","display_name":"Speculative execution","score":0.6582151651382446},{"id":"https://openalex.org/keywords/symbolic-execution","display_name":"Symbolic execution","score":0.5368675589561462},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.5064343214035034},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.4863038957118988},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.47030800580978394},{"id":"https://openalex.org/keywords/parameterized-complexity","display_name":"Parameterized complexity","score":0.4592757821083069},{"id":"https://openalex.org/keywords/model-checking","display_name":"Model checking","score":0.44826069474220276},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4463401138782501},{"id":"https://openalex.org/keywords/branch-predictor","display_name":"Branch predictor","score":0.4445139169692993},{"id":"https://openalex.org/keywords/programmer","display_name":"Programmer","score":0.4426899254322052},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.4204555153846741},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.41440349817276},{"id":"https://openalex.org/keywords/cache","display_name":"Cache","score":0.41299107670783997},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.24881288409233093},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.17616653442382812}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8509154915809631},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6683251261711121},{"id":"https://openalex.org/C141331961","wikidata":"https://www.wikidata.org/wiki/Q2164465","display_name":"Speculative execution","level":2,"score":0.6582151651382446},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.5368675589561462},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.5064343214035034},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4863038957118988},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.47030800580978394},{"id":"https://openalex.org/C165464430","wikidata":"https://www.wikidata.org/wiki/Q1570441","display_name":"Parameterized complexity","level":2,"score":0.4592757821083069},{"id":"https://openalex.org/C110251889","wikidata":"https://www.wikidata.org/wiki/Q1569697","display_name":"Model checking","level":2,"score":0.44826069474220276},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4463401138782501},{"id":"https://openalex.org/C168522837","wikidata":"https://www.wikidata.org/wiki/Q679552","display_name":"Branch predictor","level":2,"score":0.4445139169692993},{"id":"https://openalex.org/C2778514511","wikidata":"https://www.wikidata.org/wiki/Q1374194","display_name":"Programmer","level":2,"score":0.4426899254322052},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.4204555153846741},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.41440349817276},{"id":"https://openalex.org/C115537543","wikidata":"https://www.wikidata.org/wiki/Q165596","display_name":"Cache","level":2,"score":0.41299107670783997},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.24881288409233093},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.17616653442382812},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.0},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/iccad51958.2021.9643462","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iccad51958.2021.9643462","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE/ACM International Conference On Computer Aided Design (ICCAD)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.75}],"awards":[{"id":"https://openalex.org/G2512157488","display_name":"Heisenbugs: From Detection to Explanation","funder_award_id":"VRG11-005","funder_id":"https://openalex.org/F4320321003","funder_display_name":"Vienna Science and Technology Fund"}],"funders":[{"id":"https://openalex.org/F4320321003","display_name":"Vienna Science and Technology Fund","ror":"https://ror.org/01f9mc681"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W1531820677","https://openalex.org/W1982205631","https://openalex.org/W2159595840","https://openalex.org/W2293441536","https://openalex.org/W2418260908","https://openalex.org/W2766853874","https://openalex.org/W2884937557","https://openalex.org/W2899912069","https://openalex.org/W2900479912","https://openalex.org/W2912742709","https://openalex.org/W2971539790","https://openalex.org/W2981929361","https://openalex.org/W3015465581","https://openalex.org/W3036557299","https://openalex.org/W3123390024","https://openalex.org/W3185711917","https://openalex.org/W4250728693","https://openalex.org/W6631906878","https://openalex.org/W6756740455","https://openalex.org/W6758414631","https://openalex.org/W6789217247"],"related_works":["https://openalex.org/W2117888911","https://openalex.org/W2139338109","https://openalex.org/W4389162411","https://openalex.org/W2434762079","https://openalex.org/W365166040","https://openalex.org/W2897302968","https://openalex.org/W44766235","https://openalex.org/W2142422634","https://openalex.org/W2043979743","https://openalex.org/W1977470888"],"abstract_inverted_index":{"Spectre,":[0],"a":[1,88,164],"hardware":[2],"vulnerability":[3,166],"that":[4,90,173],"breaks":[5],"the":[6,80,138,141,161,168],"isolation":[7],"between":[8],"applications,":[9],"has":[10,64],"received":[11],"ample":[12,73],"attention":[13],"in":[14,47,55,101,167],"recent":[15],"years.":[16],"Spectre-style":[17],"attacks":[18,39],"exploit":[19],"speculative":[20,102,124],"execution":[21],"to":[22,53,66,96],"leak":[23],"information":[24],"through":[25],"micro-architectural":[26,113,134],"side-channels,":[27],"breaking":[28],"down":[29],"abstractions":[30],"software":[31,61,106],"developers":[32],"relied":[33],"on":[34,42,92,119,155],"for":[35,58,76,145],"decades.":[36],"As":[37],"these":[38],"are":[40,110],"based":[41],"fundamental":[43],"optimization":[44],"techniques":[45],"present":[46,87],"most":[48],"modern":[49],"micro-processors,":[50],"salvation":[51],"seems":[52],"lie":[54],"software-based":[56],"countermeasures":[57],"now.":[59],"Comprehensive":[60],"mitigation,":[62],"however,":[63],"proved":[65],"be":[67],"an":[68,120],"exceptionally":[69],"challenging":[70],"task":[71],"with":[72,133],"of":[74,83,99,112,123,126,148,163],"room":[75],"failure.":[77],"To":[78],"support":[79],"automated":[81],"analysis":[82],"mitigation":[84],"attempts,":[85],"we":[86,115],"technique":[89],"relies":[91],"Bounded":[93],"Model":[94],"Checking":[95],"detect":[97],"violations":[98],"non-interference":[100],"executions.":[103],"Since":[104],"off-the-shelf":[105],"model":[107],"checking":[108],"tools":[109],"nescient":[111],"state,":[114],"base":[116],"our":[117,153,174],"effort":[118],"operational":[121],"semantics":[122,130],"executions":[125],"micro-assembly":[127],"code.":[128],"Our":[129],"is":[131,176],"parameterized":[132],"components":[135],"(such":[136],"as":[137],"cache":[139],"or":[140],"branch":[142],"predictor),":[143],"allowing":[144],"precise":[146],"models":[147],"various":[149],"side-channels.":[150],"We":[151],"evaluate":[152],"approach":[154,175],"widely":[156],"used":[157],"benchmark":[158],"instances,":[159],"report":[160],"detection":[162],"zeroday":[165],"Linux":[169],"kernel,":[170],"and":[171],"demonstrate":[172],"more":[177],"exhaustive":[178],"than":[179],"symbolic":[180],"simulation":[181],"(with":[182],"comparable":[183],"computational":[184],"effort).":[185]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}