{"id":"https://openalex.org/W4384948714","doi":"https://doi.org/10.1109/sp46215.2023.10179283","title":"DevIOus: Device-Driven Side-Channel Attacks on the IOMMU","display_name":"DevIOus: Device-Driven Side-Channel Attacks on the IOMMU","publication_year":2023,"publication_date":"2023-05-01","ids":{"openalex":"https://openalex.org/W4384948714","doi":"https://doi.org/10.1109/sp46215.2023.10179283"},"language":"en","primary_location":{"id":"doi:10.1109/sp46215.2023.10179283","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46215.2023.10179283","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100387013","display_name":"Taehun Kim","orcid":"https://orcid.org/0000-0001-9322-9741"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Taehun Kim","raw_affiliation_strings":["Korea University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Korea University","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010484320","display_name":"Hyeongjin Park","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hyeongjin Park","raw_affiliation_strings":["Korea University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Korea University","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067836826","display_name":"Seokmin Lee","orcid":"https://orcid.org/0000-0001-6642-2677"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Seokmin Lee","raw_affiliation_strings":["Korea University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Korea University","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071189588","display_name":"Seunghee Shin","orcid":null},"institutions":[{"id":"https://openalex.org/I123946342","display_name":"Binghamton University","ror":"https://ror.org/008rmbt77","country_code":"US","type":"education","lineage":["https://openalex.org/I123946342"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Seunghee Shin","raw_affiliation_strings":["The State University of New York at Binghamton"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The State University of New York at Binghamton","institution_ids":["https://openalex.org/I123946342"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059902523","display_name":"Junbeom Hur","orcid":"https://orcid.org/0000-0002-4823-4194"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Junbeom Hur","raw_affiliation_strings":["Korea University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Korea University","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5059690207","display_name":"Youngjoo Shin","orcid":"https://orcid.org/0000-0003-4831-7392"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Youngjoo Shin","raw_affiliation_strings":["Korea University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Korea University","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.3067,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.8220604,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"2288","last_page":"2305"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10502","display_name":"Advanced Memory and Neural Computing","score":0.9947999715805054,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10478","display_name":"Diamond and Carbon-based Materials Research","score":0.9901999831199646,"subfield":{"id":"https://openalex.org/subfields/2505","display_name":"Materials Chemistry"},"field":{"id":"https://openalex.org/fields/25","display_name":"Materials Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8394484519958496},{"id":"https://openalex.org/keywords/remote-direct-memory-access","display_name":"Remote direct memory access","score":0.7659493684768677},{"id":"https://openalex.org/keywords/translation-lookaside-buffer","display_name":"Translation lookaside buffer","score":0.7359921932220459},{"id":"https://openalex.org/keywords/side-channel-attack","display_name":"Side channel attack","score":0.7013660073280334},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.5588194131851196},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.5070540904998779},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3339417576789856},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.32946503162384033},{"id":"https://openalex.org/keywords/physical-address","display_name":"Physical address","score":0.2509981095790863},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.20266222953796387},{"id":"https://openalex.org/keywords/semiconductor-memory","display_name":"Semiconductor memory","score":0.1029801070690155}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8394484519958496},{"id":"https://openalex.org/C130795937","wikidata":"https://www.wikidata.org/wiki/Q2561570","display_name":"Remote direct memory access","level":2,"score":0.7659493684768677},{"id":"https://openalex.org/C116007543","wikidata":"https://www.wikidata.org/wiki/Q1071403","display_name":"Translation lookaside buffer","level":4,"score":0.7359921932220459},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.7013660073280334},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.5588194131851196},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5070540904998779},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3339417576789856},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.32946503162384033},{"id":"https://openalex.org/C41036726","wikidata":"https://www.wikidata.org/wiki/Q844824","display_name":"Physical address","level":3,"score":0.2509981095790863},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.20266222953796387},{"id":"https://openalex.org/C98986596","wikidata":"https://www.wikidata.org/wiki/Q1143031","display_name":"Semiconductor memory","level":2,"score":0.1029801070690155}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/sp46215.2023.10179283","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46215.2023.10179283","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.47999998927116394}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":67,"referenced_works":["https://openalex.org/W161931246","https://openalex.org/W1503814339","https://openalex.org/W1583301963","https://openalex.org/W1934458198","https://openalex.org/W1985229168","https://openalex.org/W1986468587","https://openalex.org/W1988374166","https://openalex.org/W1994849315","https://openalex.org/W2029549161","https://openalex.org/W2050143636","https://openalex.org/W2061354941","https://openalex.org/W2067768229","https://openalex.org/W2071704971","https://openalex.org/W2093584083","https://openalex.org/W2114101350","https://openalex.org/W2140101134","https://openalex.org/W2142633847","https://openalex.org/W2154565572","https://openalex.org/W2255548496","https://openalex.org/W2294312748","https://openalex.org/W2298436731","https://openalex.org/W2337480911","https://openalex.org/W2507765405","https://openalex.org/W2554389056","https://openalex.org/W2566068837","https://openalex.org/W2588337836","https://openalex.org/W2621239346","https://openalex.org/W2766210752","https://openalex.org/W2783994811","https://openalex.org/W2785324822","https://openalex.org/W2792446256","https://openalex.org/W2797889914","https://openalex.org/W2803900647","https://openalex.org/W2926543120","https://openalex.org/W2954241526","https://openalex.org/W2965115498","https://openalex.org/W2976763854","https://openalex.org/W3004850737","https://openalex.org/W3015942900","https://openalex.org/W3016526453","https://openalex.org/W3042422567","https://openalex.org/W3097736620","https://openalex.org/W3112409568","https://openalex.org/W3154803439","https://openalex.org/W3188121257","https://openalex.org/W3195621029","https://openalex.org/W3201776698","https://openalex.org/W3206534076","https://openalex.org/W3213182453","https://openalex.org/W4210498039","https://openalex.org/W4243908662","https://openalex.org/W4299301436","https://openalex.org/W4323921468","https://openalex.org/W6628261430","https://openalex.org/W6630023437","https://openalex.org/W6633448724","https://openalex.org/W6640935840","https://openalex.org/W6738811965","https://openalex.org/W6742390660","https://openalex.org/W6744112109","https://openalex.org/W6754306559","https://openalex.org/W6762377113","https://openalex.org/W6766366649","https://openalex.org/W6783181973","https://openalex.org/W6799065049","https://openalex.org/W6801391798","https://openalex.org/W6950361294"],"related_works":["https://openalex.org/W1983621239","https://openalex.org/W2357767623","https://openalex.org/W4310371050","https://openalex.org/W3135214639","https://openalex.org/W2594055038","https://openalex.org/W2754465584","https://openalex.org/W1966518636","https://openalex.org/W3095608397","https://openalex.org/W2384030959","https://openalex.org/W4384948714"],"abstract_inverted_index":{"Modern":[0],"computer":[1],"systems":[2],"take":[3],"advantage":[4],"of":[5,35,67,128,131],"Input/Output":[6],"Memory":[7],"Management":[8],"Unit":[9],"(IOMMU)":[10],"to":[11,18,101],"protect":[12],"memory":[13],"from":[14],"DMA":[15],"attacks,":[16],"or":[17,114],"achieve":[19],"strong":[20],"isolation":[21],"in":[22,116],"virtualization.":[23],"Despite":[24],"its":[25,145],"promising":[26],"benefits,":[27],"the":[28,39,41,57,61,87,103,129,141,182,191],"IOMMU":[29,42],"could":[30],"be":[31,64],"a":[32,65,68,81,117,160],"new":[33],"source":[34],"security":[36],"threats.":[37],"Like":[38],"MMU,":[40],"also":[43,186],"has":[44,108],"Translation":[45],"Lookaside":[46],"Buffer":[47],"(TLB)":[48],"named":[49],"IOTLB,":[50],"an":[51,163],"address":[52],"translation":[53],"cache":[54],"that":[55,170],"keeps":[56],"recent":[58],"translations.":[59],"Accordingly,":[60],"IOTLB":[62,130,142],"can":[63],"target":[66,171],"timing":[69,156],"side-channel":[70,84,193],"attack,":[71],"revealing":[72],"victim\u2019s":[73,118],"secret.":[74],"In":[75],"this":[76,138],"paper,":[77],"we":[78,152,166],"present":[79],"DevIOus,":[80],"novel":[82],"device-driven":[83],"attack":[85,107,157],"exploiting":[86],"IOTLB.":[88],"DevIOus":[89,121],"employs":[90],"DMA-capable":[91],"PCIe":[92],"devices,":[93],"such":[94],"as":[95,125],"GPU":[96,161],"and":[97,143,162,177],"RDMA-enabled":[98],"NIC":[99],"(RNIC),":[100],"deliver":[102],"attack.":[104,194],"Thus,":[105],"our":[106],"no":[109],"influence":[110],"on":[111,150],"CPU":[112],"caches":[113],"TLB":[115],"machine.":[119],"Implementing":[120],"is":[122],"not":[123],"trivial":[124],"microarchitectural":[126],"internals":[127],"Intel":[132],"processors":[133],"are":[134],"hidden.":[135],"We":[136,185],"overcome":[137],"by":[139],"reverse-engineering":[140],"disclose":[144],"hidden":[146],"architectural":[147],"properties.":[148],"Based":[149],"this,":[151],"construct":[153],"two":[154],"IOTLB-based":[155],"primitives":[158],"using":[159],"RNIC.":[164],"Then,":[165],"demonstrate":[167],"practical":[168],"attacks":[169],"co-located":[172],"VMs":[173],"under":[174],"hardware-assisted":[175],"isolation,":[176],"remote":[178],"machines":[179],"connected":[180],"over":[181],"RDMA":[183],"network.":[184],"discuss":[187],"possible":[188],"mitigations":[189],"against":[190],"proposed":[192]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}
