{"id":"https://openalex.org/W4416429819","doi":"https://doi.org/10.1109/iccad66269.2025.11240638","title":"SpectrePrefetch: Undermining Cache-Centric Secure Speculation with Modern Hardware Prefetchers","display_name":"SpectrePrefetch: Undermining Cache-Centric Secure Speculation with Modern Hardware Prefetchers","publication_year":2025,"publication_date":"2025-10-26","ids":{"openalex":"https://openalex.org/W4416429819","doi":"https://doi.org/10.1109/iccad66269.2025.11240638"},"language":null,"primary_location":{"id":"doi:10.1109/iccad66269.2025.11240638","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iccad66269.2025.11240638","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/ACM International Conference On Computer Aided Design (ICCAD)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5030429740","display_name":"Fang Jiang","orcid":"https://orcid.org/0000-0002-2028-9919"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fang Jiang","raw_affiliation_strings":["Southeast University,School of Cyber Science and Engineering,Nanjing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Southeast University,School of Cyber Science and Engineering,Nanjing,China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005130352","display_name":"Fei Tong","orcid":"https://orcid.org/0000-0002-0629-4543"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fei Tong","raw_affiliation_strings":["Southeast University,School of Cyber Science and Engineering,Nanjing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Southeast University,School of Cyber Science and Engineering,Nanjing,China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101563188","display_name":"Xiaoyu Cheng","orcid":"https://orcid.org/0000-0002-5102-8615"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoyu Cheng","raw_affiliation_strings":["Southeast University,School of Cyber Science and Engineering,Nanjing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Southeast University,School of Cyber Science and Engineering,Nanjing,China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100697818","display_name":"Zhe Zhou","orcid":"https://orcid.org/0000-0003-3253-6355"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhe Zhou","raw_affiliation_strings":["Southeast University,School of Cyber Science and Engineering,Nanjing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Southeast University,School of Cyber Science and Engineering,Nanjing,China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100651176","display_name":"Hongyu Wang","orcid":"https://orcid.org/0000-0003-4795-6926"},"institutions":[{"id":"https://openalex.org/I4210140129","display_name":"Empowerment Program","ror":"https://ror.org/042qv2836","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I4210140129"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hongyu Wang","raw_affiliation_strings":["Nanjing Unipower Information Technology Co., Ltd,Nanjing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanjing Unipower Information Technology Co., Ltd,Nanjing,China","institution_ids":["https://openalex.org/I4210140129"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5078252230","display_name":"Yuxing Mao","orcid":"https://orcid.org/0000-0002-1829-4719"},"institutions":[{"id":"https://openalex.org/I158842170","display_name":"Chongqing University","ror":"https://ror.org/023rhb549","country_code":"CN","type":"education","lineage":["https://openalex.org/I158842170"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuxing Mao","raw_affiliation_strings":["Chongqing University,Chongqing,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chongqing University,Chongqing,China","institution_ids":["https://openalex.org/I158842170"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"9"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9916999936103821,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9916999936103821,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.0010999999940395355,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.0010999999940395355,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.8036999702453613},{"id":"https://openalex.org/keywords/speculation","display_name":"Speculation","score":0.6391000151634216},{"id":"https://openalex.org/keywords/cache","display_name":"Cache","score":0.6129000186920166},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.44589999318122864},{"id":"https://openalex.org/keywords/speculative-execution","display_name":"Speculative execution","score":0.43959999084472656},{"id":"https://openalex.org/keywords/debugging","display_name":"Debugging","score":0.3935000002384186},{"id":"https://openalex.org/keywords/transient","display_name":"Transient (computer programming)","score":0.3707999885082245}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8079000115394592},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.8036999702453613},{"id":"https://openalex.org/C47941915","wikidata":"https://www.wikidata.org/wiki/Q107885","display_name":"Speculation","level":2,"score":0.6391000151634216},{"id":"https://openalex.org/C115537543","wikidata":"https://www.wikidata.org/wiki/Q165596","display_name":"Cache","level":2,"score":0.6129000186920166},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.4950999915599823},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.44589999318122864},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4424000084400177},{"id":"https://openalex.org/C141331961","wikidata":"https://www.wikidata.org/wiki/Q2164465","display_name":"Speculative execution","level":2,"score":0.43959999084472656},{"id":"https://openalex.org/C168065819","wikidata":"https://www.wikidata.org/wiki/Q845566","display_name":"Debugging","level":2,"score":0.3935000002384186},{"id":"https://openalex.org/C2780799671","wikidata":"https://www.wikidata.org/wiki/Q17087362","display_name":"Transient (computer programming)","level":2,"score":0.3707999885082245},{"id":"https://openalex.org/C189783530","wikidata":"https://www.wikidata.org/wiki/Q352090","display_name":"CPU cache","level":3,"score":0.34619998931884766},{"id":"https://openalex.org/C2777042071","wikidata":"https://www.wikidata.org/wiki/Q6509304","display_name":"Leakage (economics)","level":2,"score":0.3278000056743622},{"id":"https://openalex.org/C39217717","wikidata":"https://www.wikidata.org/wiki/Q1432354","display_name":"Hardware security module","level":3,"score":0.3188000023365021},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.303600013256073},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.2888999879360199},{"id":"https://openalex.org/C141917322","wikidata":"https://www.wikidata.org/wiki/Q1025017","display_name":"Cache coherence","level":5,"score":0.28679999709129333},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.2833000123500824},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.28299999237060547},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2770000100135803},{"id":"https://openalex.org/C51185590","wikidata":"https://www.wikidata.org/wiki/Q1017228","display_name":"Bus sniffing","level":5,"score":0.267300009727478}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/iccad66269.2025.11240638","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iccad66269.2025.11240638","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/ACM International Conference On Computer Aided Design (ICCAD)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320324856","display_name":"Southeast University","ror":"https://ror.org/04ct4d772"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W2030812654","https://openalex.org/W2234355962","https://openalex.org/W2329976284","https://openalex.org/W2810584084","https://openalex.org/W2903910116","https://openalex.org/W2905380323","https://openalex.org/W2944616073","https://openalex.org/W2949870979","https://openalex.org/W2962986039","https://openalex.org/W2963311060","https://openalex.org/W2979849111","https://openalex.org/W2989861912","https://openalex.org/W3094181213","https://openalex.org/W3159033757","https://openalex.org/W3210462562","https://openalex.org/W3211301023","https://openalex.org/W4241590855","https://openalex.org/W4288057698","https://openalex.org/W4292072387","https://openalex.org/W4308083579","https://openalex.org/W4308083741","https://openalex.org/W4309073410","https://openalex.org/W4318541606","https://openalex.org/W4366163888","https://openalex.org/W4388857078","https://openalex.org/W4393407237","https://openalex.org/W4404954366"],"related_works":[],"abstract_inverted_index":{"Transient":[0],"execution":[1,6,64,223],"attacks":[2,96,224],"can":[3,151],"exploit":[4],"speculative":[5,63,87],"to":[7,35,43,125,182,193],"leak":[8,152],"sensitive":[9],"information":[10],"through":[11],"cache":[12,59,116,177],"systems.":[13],"Consequently,":[14],"numerous":[15],"cache-centric":[16,170],"secure":[17,171,176],"speculation":[18,172],"defenses":[19,32,173],"have":[20],"been":[21],"proposed.":[22],"However,":[23],"as":[24,80,199],"we":[25,69,90,213],"demonstrate":[26],"both":[27],"theoretically":[28],"and":[29,105,109,130,140,179],"empirically,":[30],"these":[31],"remain":[33],"vulnerable":[34],"data":[36],"leakage":[37],"because":[38],"they":[39],"neglect":[40],"or":[41,118,174,230],"fail":[42],"fully":[44],"address":[45],"the":[46,51,62,102,115,119,191],"security":[47,141],"issues":[48],"posed":[49],"by":[50,113,209],"hardware":[52,78,210,226],"prefetcher,":[53],"a":[54,71,131,155,215],"critical":[55],"component":[56],"of":[57,94,158,164],"modern":[58],"systems,":[60],"within":[61],"path.":[65],"In":[66],"this":[67],"work,":[68],"develop":[70],"new":[72],"attack":[73,126],"framework,":[74],"SpectrePrefetch,":[75],"which":[76],"exploits":[77],"prefetchers":[79],"transmission":[81],"mediums":[82],"for":[83],"leaking":[84],"secrets":[85,100,112,153],"during":[86],"execution.":[88],"Specifically,":[89],"introduce":[91],"two":[92],"variants":[93],"SpectrePrefetch":[95,124,150,168],"that":[97,149,188],"encode":[98],"transient":[99,222],"into":[101],"prefetching":[103,106,219],"patterns":[104],"confidence,":[107],"respectively,":[108],"then":[110],"recover":[111],"probing":[114],"state":[117],"prefetcher":[120,192],"state.":[121],"We":[122],"launch":[123],"several":[127],"Intel":[128],"CPUs":[129],"Gem5":[132],"simulator,":[133],"demonstrating":[134],"its":[135],"feasibility,":[136],"robustness,":[137],"bandwidth,":[138],"scalability,":[139],"implications":[142],"on":[143,196,235],"existing":[144],"defenses.":[145],"The":[146],"results":[147,186],"show":[148,187],"at":[154],"high":[156],"rate":[157],"31.25":[159],"Kbps":[160],"with":[161],"an":[162],"accuracy":[163],"98.87%.":[165],"More":[166],"seriously,":[167],"undermines":[169],"even":[175,231],"designs,":[178],"is":[180],"challenging":[181],"mitigate.":[183],"Our":[184],"experimental":[185],"simply":[189],"restricting":[190],"update":[194],"only":[195],"committed":[197],"instructions,":[198],"proposed":[200],"in":[201],"MuonTrap,":[202],"nearly":[203],"loses":[204],"all":[205],"performance":[206,234],"benefits":[207],"provided":[208],"prefetching.":[211],"Finally,":[212],"propose":[214],"low-cost,":[216],"scalable":[217],"non-deterministic":[218],"defense":[220],"against":[221],"exploiting":[225],"prefetchers,":[227],"while":[228],"maintaining":[229],"improving":[232],"average":[233],"SPEC2017":[236],"benchmarks.":[237]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-11-20T00:00:00"}