{"id":"https://openalex.org/W4384948650","doi":"https://doi.org/10.1109/sp46215.2023.10179391","title":"Hide and Seek with Spectres: Efficient discovery of speculative information leaks with random testing","display_name":"Hide and Seek with Spectres: Efficient discovery of speculative information leaks with random testing","publication_year":2023,"publication_date":"2023-05-01","ids":{"openalex":"https://openalex.org/W4384948650","doi":"https://doi.org/10.1109/sp46215.2023.10179391"},"language":"en","primary_location":{"id":"doi:10.1109/sp46215.2023.10179391","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46215.2023.10179391","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5002184063","display_name":"Oleksii Oleksenko","orcid":"https://orcid.org/0009-0009-1964-8038"},"institutions":[{"id":"https://openalex.org/I4210164937","display_name":"Microsoft Research (United Kingdom)","ror":"https://ror.org/05k87vq12","country_code":"GB","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210164937"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Oleksii Oleksenko","raw_affiliation_strings":["Microsoft Research"],"affiliations":[{"raw_affiliation_string":"Microsoft Research","institution_ids":["https://openalex.org/I4210164937"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069694679","display_name":"Marco Guarnieri","orcid":"https://orcid.org/0000-0001-5767-555X"},"institutions":[{"id":"https://openalex.org/I4210162154","display_name":"IMDEA Software Institute","ror":"https://ror.org/04xvfkh51","country_code":"ES","type":"facility","lineage":["https://openalex.org/I105140100","https://openalex.org/I4210162154"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Marco Guarnieri","raw_affiliation_strings":["IMDEA Software Institute"],"affiliations":[{"raw_affiliation_string":"IMDEA Software Institute","institution_ids":["https://openalex.org/I4210162154"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085729110","display_name":"Boris K\u00f6pf","orcid":"https://orcid.org/0009-0005-8004-0743"},"institutions":[{"id":"https://openalex.org/I4210164937","display_name":"Microsoft Research (United Kingdom)","ror":"https://ror.org/05k87vq12","country_code":"GB","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210164937"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Boris K\u00f6pf","raw_affiliation_strings":["Microsoft Research"],"affiliations":[{"raw_affiliation_string":"Microsoft Research","institution_ids":["https://openalex.org/I4210164937"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022593894","display_name":"Mark Silberstein","orcid":"https://orcid.org/0000-0001-9659-068X"},"institutions":[{"id":"https://openalex.org/I174306211","display_name":"Technion \u2013 Israel Institute of Technology","ror":"https://ror.org/03qryx823","country_code":"IL","type":"education","lineage":["https://openalex.org/I174306211"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Mark Silberstein","raw_affiliation_strings":["Technion"],"affiliations":[{"raw_affiliation_string":"Technion","institution_ids":["https://openalex.org/I174306211"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5002184063"],"corresponding_institution_ids":["https://openalex.org/I4210164937"],"apc_list":null,"apc_paid":null,"fwci":2.1409,"has_fulltext":false,"cited_by_count":12,"citation_normalized_percentile":{"value":0.89776495,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1737","last_page":"1752"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9923999905586243,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7876462936401367},{"id":"https://openalex.org/keywords/speculative-execution","display_name":"Speculative execution","score":0.6766724586486816},{"id":"https://openalex.org/keywords/root-cause","display_name":"Root cause","score":0.6225079298019409},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5219218730926514},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.49776914715766907},{"id":"https://openalex.org/keywords/white-box-testing","display_name":"White-box testing","score":0.4394969046115875},{"id":"https://openalex.org/keywords/random-testing","display_name":"Random testing","score":0.41390371322631836},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.34555137157440186},{"id":"https://openalex.org/keywords/test-case","display_name":"Test case","score":0.1656152307987213},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.12604552507400513},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.12402740120887756},{"id":"https://openalex.org/keywords/reliability-engineering","display_name":"Reliability engineering","score":0.1173577606678009},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.09033414721488953}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7876462936401367},{"id":"https://openalex.org/C141331961","wikidata":"https://www.wikidata.org/wiki/Q2164465","display_name":"Speculative execution","level":2,"score":0.6766724586486816},{"id":"https://openalex.org/C84945661","wikidata":"https://www.wikidata.org/wiki/Q7366567","display_name":"Root cause","level":2,"score":0.6225079298019409},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5219218730926514},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.49776914715766907},{"id":"https://openalex.org/C162443782","wikidata":"https://www.wikidata.org/wiki/Q1066228","display_name":"White-box testing","level":5,"score":0.4394969046115875},{"id":"https://openalex.org/C106159264","wikidata":"https://www.wikidata.org/wiki/Q17146789","display_name":"Random testing","level":4,"score":0.41390371322631836},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.34555137157440186},{"id":"https://openalex.org/C128942645","wikidata":"https://www.wikidata.org/wiki/Q1568346","display_name":"Test case","level":3,"score":0.1656152307987213},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.12604552507400513},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.12402740120887756},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.1173577606678009},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.09033414721488953},{"id":"https://openalex.org/C186846655","wikidata":"https://www.wikidata.org/wiki/Q3398377","display_name":"Software construction","level":4,"score":0.0},{"id":"https://openalex.org/C152877465","wikidata":"https://www.wikidata.org/wiki/Q208042","display_name":"Regression analysis","level":2,"score":0.0},{"id":"https://openalex.org/C149091818","wikidata":"https://www.wikidata.org/wiki/Q2429814","display_name":"Software system","level":3,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/sp46215.2023.10179391","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp46215.2023.10179391","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.7900000214576721,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W1427174644","https://openalex.org/W1488058190","https://openalex.org/W2103289002","https://openalex.org/W2883613460","https://openalex.org/W2954241526","https://openalex.org/W2963311060","https://openalex.org/W2963739369","https://openalex.org/W2976763854","https://openalex.org/W3007037833","https://openalex.org/W3008086078","https://openalex.org/W3015465581","https://openalex.org/W3046515513","https://openalex.org/W3130643822","https://openalex.org/W3153387123","https://openalex.org/W3165348418","https://openalex.org/W3171088241","https://openalex.org/W3187569413","https://openalex.org/W3191114843","https://openalex.org/W3198158199","https://openalex.org/W3198421887","https://openalex.org/W3202816353","https://openalex.org/W3205775188","https://openalex.org/W3214883374","https://openalex.org/W4236016574","https://openalex.org/W4281986595","https://openalex.org/W4287722817","https://openalex.org/W4287774615","https://openalex.org/W4308643153","https://openalex.org/W6628261430","https://openalex.org/W6753443810","https://openalex.org/W6778625128","https://openalex.org/W6781211927","https://openalex.org/W6796961280","https://openalex.org/W6801391798"],"related_works":["https://openalex.org/W2913814439","https://openalex.org/W2542083118","https://openalex.org/W2329452785","https://openalex.org/W2356380379","https://openalex.org/W2993855670","https://openalex.org/W2364562957","https://openalex.org/W2364808845","https://openalex.org/W2363925233","https://openalex.org/W2366284060","https://openalex.org/W1794016765"],"abstract_inverted_index":{"Attacks":[0],"like":[1],"Spectre":[2],"abuse":[3],"speculative":[4,24,119],"execution,":[5],"one":[6],"of":[7,12,49,52,61,91,101,116],"the":[8,31,47,58,62,80,84],"key":[9],"performance":[10,63],"optimizations":[11],"modern":[13],"CPUs.":[14,29,108],"Recently,":[15],"several":[16],"testing":[17,32,41,81,99],"tools":[18],"have":[19,127],"emerged":[20],"to":[21,71,88,96],"automatically":[22],"detect":[23],"leaks":[25,120],"in":[26,65],"commercial":[27],"(black-box)":[28],"However,":[30],"process":[33],"is":[34],"still":[35],"slow,":[36],"which":[37],"has":[38],"hindered":[39],"in-depth":[40],"campaigns,":[42],"and":[43,68,106,124,131],"so":[44],"far":[45],"prevented":[46],"discovery":[48],"new":[50],"classes":[51],"leakage.In":[53],"this":[54],"paper,":[55],"we":[56,78,112],"identify":[57],"root":[59],"causes":[60],"limitations":[64],"existing":[66],"approaches,":[67],"propose":[69],"techniques":[70],"overcome":[72],"these":[73,76],"limitations.":[74],"With":[75],"techniques,":[77],"improve":[79],"speed":[82],"over":[83],"state-of-the-art":[85],"by":[86],"up":[87],"two":[89,114],"orders":[90],"magnitude.These":[92],"improvements":[93],"enable":[94],"us":[95],"run":[97],"a":[98,110],"campaign":[100],"unprecedented":[102],"depth":[103],"on":[104],"Intel":[105],"AMD":[107],"As":[109],"highlight,":[111],"discover":[113],"types":[115],"previously":[117],"unknown":[118],"(affecting":[121],"string":[122],"comparison":[123],"division)":[125],"that":[126],"escaped":[128],"previous":[129],"manual":[130],"automatic":[132],"analyses.":[133]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":2}],"updated_date":"2026-03-06T13:50:29.536080","created_date":"2025-10-10T00:00:00"}
