{"id":"https://openalex.org/W3088385171","doi":"https://doi.org/10.1109/tcad.2020.3024853","title":"VoltJockey: A New Dynamic Voltage Scaling-Based Fault Injection Attack on Intel SGX","display_name":"VoltJockey: A New Dynamic Voltage Scaling-Based Fault Injection Attack on Intel SGX","publication_year":2020,"publication_date":"2020-09-18","ids":{"openalex":"https://openalex.org/W3088385171","doi":"https://doi.org/10.1109/tcad.2020.3024853","mag":"3088385171"},"language":"en","primary_location":{"id":"doi:10.1109/tcad.2020.3024853","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tcad.2020.3024853","pdf_url":null,"source":{"id":"https://openalex.org/S100835903","display_name":"IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems","issn_l":"0278-0070","issn":["0278-0070","1937-4151"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5069202094","display_name":"Pengfei Qiu","orcid":"https://orcid.org/0000-0001-8644-1445"},"institutions":[{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Pengfei Qiu","raw_affiliation_strings":["Beijing National Research Center for Information Science and Technology, Tsinghua University, Beijing, China","Cyberspace Security Research Center, Peng Cheng Laboratory, Shenzhen, China","Department of Computer Science and Technology, Tsinghua University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-8644-1445","affiliations":[{"raw_affiliation_string":"Beijing National Research Center for Information Science and Technology, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Cyberspace Security Research Center, Peng Cheng Laboratory, Shenzhen, China","institution_ids":["https://openalex.org/I4210136793"]},{"raw_affiliation_string":"Department of Computer Science and Technology, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100450575","display_name":"Dongsheng Wang","orcid":"https://orcid.org/0000-0001-5779-9026"},"institutions":[{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dongsheng Wang","raw_affiliation_strings":["Beijing National Research Center for Information Science and Technology, Tsinghua University, Beijing, China","Cyberspace Security Research Center, Peng Cheng Laboratory, Shenzhen, China","Department of Computer Science and Technology, Tsinghua University, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing National Research Center for Information Science and Technology, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Cyberspace Security Research Center, Peng Cheng Laboratory, Shenzhen, China","institution_ids":["https://openalex.org/I4210136793"]},{"raw_affiliation_string":"Department of Computer Science and Technology, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058507537","display_name":"Yongqiang Lyu","orcid":"https://orcid.org/0000-0003-2573-963X"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yongqiang Lyu","raw_affiliation_strings":["Beijing National Research Center for Information Science and Technology, Tsinghua University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-2573-963X","affiliations":[{"raw_affiliation_string":"Beijing National Research Center for Information Science and Technology, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089545250","display_name":"Ruidong Tian","orcid":null},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ruidong Tian","raw_affiliation_strings":["School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044874015","display_name":"Chunlu Wang","orcid":"https://orcid.org/0000-0002-0343-5830"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chunlu Wang","raw_affiliation_strings":["School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5012474783","display_name":"Gang Qu","orcid":"https://orcid.org/0000-0001-6759-8949"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gang Qu","raw_affiliation_strings":["Department of Electrical and Computer Engineering, Institute for Systems Research, University of Maryland, College Park, MD, USA"],"raw_orcid":"https://orcid.org/0000-0001-6759-8949","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Institute for Systems Research, University of Maryland, College Park, MD, USA","institution_ids":["https://openalex.org/I66946132"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.3468,"has_fulltext":false,"cited_by_count":26,"citation_normalized_percentile":{"value":0.90961946,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"40","issue":"6","first_page":"1130","last_page":"1143"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9944000244140625,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7550348043441772},{"id":"https://openalex.org/keywords/fault-injection","display_name":"Fault injection","score":0.5987111330032349},{"id":"https://openalex.org/keywords/side-channel-attack","display_name":"Side channel attack","score":0.5759821534156799},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.5461370944976807},{"id":"https://openalex.org/keywords/guard","display_name":"Guard (computer science)","score":0.462709903717041},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.46214282512664795},{"id":"https://openalex.org/keywords/fault","display_name":"Fault (geology)","score":0.4599446654319763},{"id":"https://openalex.org/keywords/voltage","display_name":"Voltage","score":0.4500928819179535},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.44687679409980774},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.4403947591781616},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3010185956954956},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.1556660532951355},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.12367194890975952},{"id":"https://openalex.org/keywords/electrical-engineering","display_name":"Electrical engineering","score":0.092803955078125}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7550348043441772},{"id":"https://openalex.org/C2775928411","wikidata":"https://www.wikidata.org/wiki/Q2041312","display_name":"Fault injection","level":3,"score":0.5987111330032349},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.5759821534156799},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5461370944976807},{"id":"https://openalex.org/C141141315","wikidata":"https://www.wikidata.org/wiki/Q2379942","display_name":"Guard (computer science)","level":2,"score":0.462709903717041},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.46214282512664795},{"id":"https://openalex.org/C175551986","wikidata":"https://www.wikidata.org/wiki/Q47089","display_name":"Fault (geology)","level":2,"score":0.4599446654319763},{"id":"https://openalex.org/C165801399","wikidata":"https://www.wikidata.org/wiki/Q25428","display_name":"Voltage","level":2,"score":0.4500928819179535},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.44687679409980774},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4403947591781616},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3010185956954956},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.1556660532951355},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.12367194890975952},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.092803955078125},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.0},{"id":"https://openalex.org/C165205528","wikidata":"https://www.wikidata.org/wiki/Q83371","display_name":"Seismology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tcad.2020.3024853","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tcad.2020.3024853","pdf_url":null,"source":{"id":"https://openalex.org/S100835903","display_name":"IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems","issn_l":"0278-0070","issn":["0278-0070","1937-4151"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/7","display_name":"Affordable and clean energy","score":0.8999999761581421}],"awards":[{"id":"https://openalex.org/G6714212579","display_name":null,"funder_award_id":"62072263","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":64,"referenced_works":["https://openalex.org/W207309682","https://openalex.org/W1470713844","https://openalex.org/W1482871193","https://openalex.org/W1495447492","https://openalex.org/W1503689022","https://openalex.org/W1529638834","https://openalex.org/W1768994003","https://openalex.org/W1829732909","https://openalex.org/W1894651528","https://openalex.org/W1972352811","https://openalex.org/W1979802565","https://openalex.org/W1988129739","https://openalex.org/W1999248681","https://openalex.org/W1999528892","https://openalex.org/W2031989101","https://openalex.org/W2039845393","https://openalex.org/W2041435997","https://openalex.org/W2060193918","https://openalex.org/W2062455052","https://openalex.org/W2064472118","https://openalex.org/W2085992264","https://openalex.org/W2086354618","https://openalex.org/W2103570562","https://openalex.org/W2105733530","https://openalex.org/W2108730429","https://openalex.org/W2110162979","https://openalex.org/W2110941647","https://openalex.org/W2112284176","https://openalex.org/W2116785402","https://openalex.org/W2120860555","https://openalex.org/W2121043529","https://openalex.org/W2122587458","https://openalex.org/W2126787366","https://openalex.org/W2134732727","https://openalex.org/W2139750209","https://openalex.org/W2141389113","https://openalex.org/W2159059513","https://openalex.org/W2162282468","https://openalex.org/W2170489924","https://openalex.org/W2172583428","https://openalex.org/W2183849663","https://openalex.org/W2220346186","https://openalex.org/W2397423248","https://openalex.org/W2484015479","https://openalex.org/W2568542549","https://openalex.org/W2593994116","https://openalex.org/W2594560662","https://openalex.org/W2747612615","https://openalex.org/W2750990141","https://openalex.org/W2888798936","https://openalex.org/W2951040622","https://openalex.org/W2983058739","https://openalex.org/W2995091922","https://openalex.org/W3008727730","https://openalex.org/W3013954922","https://openalex.org/W3015806656","https://openalex.org/W3023959029","https://openalex.org/W3145506661","https://openalex.org/W6638045046","https://openalex.org/W6677752811","https://openalex.org/W6680679341","https://openalex.org/W6712237015","https://openalex.org/W6734345789","https://openalex.org/W6743496458"],"related_works":["https://openalex.org/W4323824501","https://openalex.org/W2355552010","https://openalex.org/W4254637722","https://openalex.org/W2980401999","https://openalex.org/W2604133224","https://openalex.org/W3016483420","https://openalex.org/W2331628363","https://openalex.org/W2393030234","https://openalex.org/W3016859066","https://openalex.org/W83665960"],"abstract_inverted_index":{"Intel":[0],"software":[1,33,76],"guard":[2],"extensions":[3],"(SGX)":[4],"increase":[5],"the":[6,32,36,40,85,96,112,122,132,161,173,177,193,197,201,211,216,225,230,237],"security":[7,82],"of":[8,66,98,196,218,232],"applications":[9],"by":[10,57,75,109,153],"enabling":[11],"them":[12],"to":[13,146,175,187,228,244],"be":[14,142],"performed":[15],"in":[16,35,84,95,200,236],"a":[17,93,128,154,180,189,206],"highly":[18],"trusted":[19],"space":[20],"(called":[21],"enclave).":[22],"Most":[23],"state-of-the-art":[24],"attacks":[25],"on":[26,29,54,210],"SGX":[27,56],"focus":[28],"either":[30],"mining":[31],"vulnerabilities":[34],"enclave":[37,238],"or":[38],"speculating":[39],"secret":[41],"data":[42],"with":[43,179,184],"side":[44],"channels.":[45],"In":[46],"this":[47,67],"study,":[48],"we":[49,204,222],"report":[50],"our":[51,246],"recent":[52],"work":[53],"breaking":[55],"inducing":[58],"voltage-oriented":[59,150],"hardware":[60,139,151],"faults.":[61,219],"The":[62],"novelty":[63],"and":[64,77,101,116,138,214,239],"importance":[65],"attack":[68,209,227],"are":[69],"that":[70,105,158],"it":[71],"is":[72,125],"completely":[73],"controlled":[74,185],"does":[78],"not":[79],"require":[80],"any":[81],"vulnerability":[83,94],"software.":[86],"Our":[87],"proposed":[88,226],"attack,":[89],"called":[90],"VoltJockey,":[91],"exploits":[92],"implementation":[97],"dynamic":[99],"voltage":[100,115,124,163,183],"frequency":[102],"scaling":[103],"(DVFS)":[104],"achieves":[106],"energy":[107],"saving":[108],"dynamically":[110],"adjusting":[111],"processor's":[113,162],"operating":[114,123],"thus":[117],"clock":[118],"frequency.":[119],"However,":[120],"if":[121],"lower":[126],"than":[127],"certain":[129],"critical":[130],"level,":[131],"circuit's":[133],"timing":[134,186],"constraint":[135],"will":[136],"fail":[137],"fault":[140,191,208],"would":[141],"created.":[143],"We":[144,170],"propose":[145],"deliberately":[147],"trigger":[148],"such":[149],"faults":[152],"loadable":[155],"kernel":[156],"module":[157,174],"can":[159],"set":[160],"through":[164],"Intel's":[165],"undocumented":[166],"model-specific":[167],"register":[168],"(MSR).":[169],"first":[171],"utilize":[172],"furnish":[176],"processor":[178],"transient":[181],"low":[182],"inject":[188],"temporal":[190],"into":[192],"target":[194],"location":[195],"program":[198],"running":[199],"enclave.":[202],"Then,":[203],"perform":[205],"differential":[207],"outputs":[212],"before":[213],"after":[215],"injection":[217],"For":[220],"demonstration,":[221],"successfully":[223],"deploy":[224],"extract":[229],"key":[231],"an":[233,241],"AES":[234],"executed":[235],"lead":[240],"SGX-protected":[242],"RSA":[243],"output":[245],"specified":[247],"result.":[248]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":8},{"year":2022,"cited_by_count":6},{"year":2021,"cited_by_count":4}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}