{"id":"https://openalex.org/W4411086609","doi":"https://doi.org/10.1109/tifs.2025.3577482","title":"Fantastic Interrupts and Where to Find Them: Exploiting Non-Movable Interrupts on x86","display_name":"Fantastic Interrupts and Where to Find Them: Exploiting Non-Movable Interrupts on x86","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4411086609","doi":"https://doi.org/10.1109/tifs.2025.3577482"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2025.3577482","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3577482","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100327618","display_name":"Xin Zhang","orcid":"https://orcid.org/0000-0003-4185-7214"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xin Zhang","raw_affiliation_strings":["School of Software and Microelectronics, the National Engineering Research Center for Software Engineering, and the PKU-OCTA Laboratory for Blockchain and Privacy Computing, Peking University, Beijing, China","School of Software and Microelectronics, Peking University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-4185-7214","affiliations":[{"raw_affiliation_string":"School of Software and Microelectronics, the National Engineering Research Center for Software Engineering, and the PKU-OCTA Laboratory for Blockchain and Privacy Computing, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]},{"raw_affiliation_string":"School of Software and Microelectronics, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035938543","display_name":"Qingni Shen","orcid":"https://orcid.org/0000-0002-0605-6043"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qingni Shen","raw_affiliation_strings":["School of Software and Microelectronics, the National Engineering Research Center for Software Engineering, and the PKU-OCTA Laboratory for Blockchain and Privacy Computing, Peking University, Beijing, China","School of Software and Microelectronics, Peking University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-0605-6043","affiliations":[{"raw_affiliation_string":"School of Software and Microelectronics, the National Engineering Research Center for Software Engineering, and the PKU-OCTA Laboratory for Blockchain and Privacy Computing, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]},{"raw_affiliation_string":"School of Software and Microelectronics, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100410710","display_name":"Zhi Zhang","orcid":"https://orcid.org/0000-0003-3604-5369"},"institutions":[{"id":"https://openalex.org/I177877127","display_name":"The University of Western Australia","ror":"https://ror.org/047272k79","country_code":"AU","type":"education","lineage":["https://openalex.org/I177877127"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Zhi Zhang","raw_affiliation_strings":["Department of Computer Science and Software Engineering, The University of Western Australia, Perth, WA, Australia","department of Computer Science and Software Engineering, University of Western Australia, Perth, WA, Australia"],"raw_orcid":"https://orcid.org/0000-0003-3604-5369","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Software Engineering, The University of Western Australia, Perth, WA, Australia","institution_ids":["https://openalex.org/I177877127"]},{"raw_affiliation_string":"department of Computer Science and Software Engineering, University of Western Australia, Perth, WA, Australia","institution_ids":["https://openalex.org/I177877127"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067969908","display_name":"Yansong Gao","orcid":"https://orcid.org/0000-0001-6029-5064"},"institutions":[{"id":"https://openalex.org/I177877127","display_name":"The University of Western Australia","ror":"https://ror.org/047272k79","country_code":"AU","type":"education","lineage":["https://openalex.org/I177877127"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Yansong Gao","raw_affiliation_strings":["Department of Computer Science and Software Engineering, The University of Western Australia, Perth, WA, Australia","department of Computer Science and Software Engineering, University of Western Australia, Perth, WA, Australia"],"raw_orcid":"https://orcid.org/0000-0001-6029-5064","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Software Engineering, The University of Western Australia, Perth, WA, Australia","institution_ids":["https://openalex.org/I177877127"]},{"raw_affiliation_string":"department of Computer Science and Software Engineering, University of Western Australia, Perth, WA, Australia","institution_ids":["https://openalex.org/I177877127"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111066040","display_name":"Jiajun Zou","orcid":"https://orcid.org/0009-0008-1393-0692"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiajun Zou","raw_affiliation_strings":["School of Software and Microelectronics, the National Engineering Research Center for Software Engineering, and the PKU-OCTA Laboratory for Blockchain and Privacy Computing, Peking University, Beijing, China","School of Software and Microelectronics, Peking University, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0008-1393-0692","affiliations":[{"raw_affiliation_string":"School of Software and Microelectronics, the National Engineering Research Center for Software Engineering, and the PKU-OCTA Laboratory for Blockchain and Privacy Computing, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]},{"raw_affiliation_string":"School of Software and Microelectronics, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101378339","display_name":"Yi Yang","orcid":null},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yi Yang","raw_affiliation_strings":["School of Software and Microelectronics, the National Engineering Research Center for Software Engineering, and the PKU-OCTA Laboratory for Blockchain and Privacy Computing, Peking University, Beijing, China","School of Software and Microelectronics, Peking University, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0001-5359-8910","affiliations":[{"raw_affiliation_string":"School of Software and Microelectronics, the National Engineering Research Center for Software Engineering, and the PKU-OCTA Laboratory for Blockchain and Privacy Computing, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]},{"raw_affiliation_string":"School of Software and Microelectronics, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5041563693","display_name":"Zhonghai Wu","orcid":"https://orcid.org/0000-0003-1268-836X"},"institutions":[{"id":"https://openalex.org/I20231570","display_name":"Peking University","ror":"https://ror.org/02v51f717","country_code":"CN","type":"education","lineage":["https://openalex.org/I20231570"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhonghai Wu","raw_affiliation_strings":["School of Software and Microelectronics, the National Engineering Research Center for Software Engineering, and the PKU-OCTA Laboratory for Blockchain and Privacy Computing, Peking University, Beijing, China","School of Software and Microelectronics, Peking University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-1268-836X","affiliations":[{"raw_affiliation_string":"School of Software and Microelectronics, the National Engineering Research Center for Software Engineering, and the PKU-OCTA Laboratory for Blockchain and Privacy Computing, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]},{"raw_affiliation_string":"School of Software and Microelectronics, Peking University, Beijing, China","institution_ids":["https://openalex.org/I20231570"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.12018592,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"20","issue":null,"first_page":"7272","last_page":"7285"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10054","display_name":"Parallel Computing and Optimization Techniques","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10054","display_name":"Parallel Computing and Optimization Techniques","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11181","display_name":"Advanced Data Storage Technologies","score":0.9922999739646912,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10101","display_name":"Cloud Computing and Resource Management","score":0.9891999959945679,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/x86","display_name":"x86","score":0.7969645261764526},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7408703565597534},{"id":"https://openalex.org/keywords/parallel-computing","display_name":"Parallel computing","score":0.41634654998779297},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.24746918678283691},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.11976778507232666}],"concepts":[{"id":"https://openalex.org/C170723468","wikidata":"https://www.wikidata.org/wiki/Q182933","display_name":"x86","level":3,"score":0.7969645261764526},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7408703565597534},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.41634654998779297},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.24746918678283691},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.11976778507232666}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tifs.2025.3577482","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3577482","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},{"id":"pmh:oai:pure.atira.dk:publications/fbbde303-d9cf-43df-932e-64ef869db56c","is_oa":false,"landing_page_url":"https://research-repository.uwa.edu.au/en/publications/fbbde303-d9cf-43df-932e-64ef869db56c","pdf_url":null,"source":{"id":"https://openalex.org/S4306402492","display_name":"UWA Profiles and Research Repository (UWA)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I177877127","host_organization_name":"The University of Western Australia","host_organization_lineage":["https://openalex.org/I177877127"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Zhang, X, Shen, Q, Zhang, Z, Gao, Y, Zou, J, Yang, Y & Wu, Z 2025, 'Fantastic Interrupts and Where to Find Them : Exploiting Non-movable Interrupts on x86', IEEE Transactions on Information Forensics and Security, vol. 20, pp. 7272 - 7285. https://doi.org/10.1109/TIFS.2025.3577482","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G427895400","display_name":null,"funder_award_id":"2024LQ03004","funder_id":"https://openalex.org/F4320321655","funder_display_name":"Science and Technology Development Fund"},{"id":"https://openalex.org/G7677721048","display_name":null,"funder_award_id":"2022YFB2703301","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"}],"funders":[{"id":"https://openalex.org/F4320321655","display_name":"Science and Technology Development Fund","ror":"https://ror.org/044vr6g03"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":60,"referenced_works":["https://openalex.org/W1964281299","https://openalex.org/W2027047406","https://openalex.org/W2051267297","https://openalex.org/W2110361443","https://openalex.org/W2337655500","https://openalex.org/W2532499458","https://openalex.org/W2603766943","https://openalex.org/W2744774028","https://openalex.org/W2775990858","https://openalex.org/W2792446256","https://openalex.org/W2890914193","https://openalex.org/W2909023102","https://openalex.org/W2976763854","https://openalex.org/W3017541286","https://openalex.org/W3046853140","https://openalex.org/W3048784143","https://openalex.org/W3102836279","https://openalex.org/W3114482311","https://openalex.org/W3153001680","https://openalex.org/W3162068173","https://openalex.org/W3166756206","https://openalex.org/W3169839597","https://openalex.org/W3176904698","https://openalex.org/W3177763227","https://openalex.org/W3194922745","https://openalex.org/W3206552155","https://openalex.org/W3213793813","https://openalex.org/W4206426144","https://openalex.org/W4214836354","https://openalex.org/W4281733476","https://openalex.org/W4283390025","https://openalex.org/W4308643042","https://openalex.org/W4310929261","https://openalex.org/W4313547874","https://openalex.org/W4360898063","https://openalex.org/W4363671730","https://openalex.org/W4388857283","https://openalex.org/W4390742688","https://openalex.org/W4391725337","https://openalex.org/W4393406863","https://openalex.org/W4393406988","https://openalex.org/W4393864461","https://openalex.org/W4399620347","https://openalex.org/W4399985603","https://openalex.org/W4402263668","https://openalex.org/W4402288667","https://openalex.org/W4404133325","https://openalex.org/W4405181326","https://openalex.org/W4407828087","https://openalex.org/W4409248636","https://openalex.org/W6628261430","https://openalex.org/W6678770513","https://openalex.org/W6780010867","https://openalex.org/W6788667363","https://openalex.org/W6794723050","https://openalex.org/W6852252792","https://openalex.org/W6856336046","https://openalex.org/W6911756032","https://openalex.org/W6940342628","https://openalex.org/W6999991521"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W3215381467","https://openalex.org/W2915956107","https://openalex.org/W4240878335","https://openalex.org/W4301207796","https://openalex.org/W4846490","https://openalex.org/W563303149","https://openalex.org/W2098290341"],"abstract_inverted_index":{"While":[0],"interrupts":[1,30,57,91,115,138,166,183],"play":[2],"a":[3,14,104,124,176],"critical":[4],"role":[5],"in":[6,99],"modern":[7],"OSes,":[8],"they":[9,46],"have":[10,150],"been":[11],"exploited":[12],"as":[13,26,35,128],"wide":[15],"range":[16],"of":[17,43,66,113,136,145,203],"side":[18,154],"channel":[19],"attacks":[20,37,248,273],"to":[21,49,95,108,131,188,197,223,234],"break":[22],"system":[23],"confidentiality,":[24],"such":[25],"keystroke":[27],"interrupts,":[28,45,68,148,265],"graphic":[29],"and":[31,92,158,179,207,258,270],"network":[32],"interrupts.":[33],"However,":[34],"previous":[36,267],"mainly":[38],"focus":[39],"on":[40,88,215],"the":[41,55,129,143,163,172,190,205,210,253],"exploitation":[42],"movable":[44,264,271],"are":[47,116,139,168,185,195,274],"required":[48],"determine":[50],"which":[51,61,69],"core":[52,212,260],"is":[53,62,256,261],"handling":[54],"target":[56],"before":[58],"their":[59,93],"attack,":[60],"non-trivial.":[63],"The":[64],"exploitability":[65],"non-movable":[67,90,114,137,147],"cannot":[70],"be":[71],"reassigned":[72],"by":[73,118],"privileged":[74],"softwares":[75],"at":[76],"will,":[77],"remains":[78],"unclear.":[79],"In":[80],"this":[81],"paper,":[82],"we":[83,149,219],"conduct":[84,123],"an":[85],"empirical":[86],"study":[87],"exploitable":[89],"contribution":[94],"interrupt-based":[96,272],"side-channel":[97],"leakages":[98],"x86-based":[100],"systems.":[101],"We":[102,121,241],"propose":[103],"dynamic":[105],"analysis":[106],"technique":[107],"investigate":[109],"how":[110],"various":[111],"types":[112,135],"influenced":[117],"different":[119,198],"workloads.":[120],"then":[122],"model":[125,246],"fingerprinting":[126,247],"attack":[127,199],"benchmark":[130],"show":[132],"that":[133,167,184],"7":[134],"exploitable.":[140],"To":[141],"demonstrate":[142,243],"viability":[144],"these":[146],"created":[151],"two":[152],"concrete":[153],"channels,":[155],"called":[156],"ThermalScope":[157,161],"TimerScope.":[159],"Specifically,":[160],"exploits":[162,181],"thermal":[164],"event":[165],"triggered":[169],"only":[170],"when":[171,252],"CPU":[173],"temperature":[174],"exceeds":[175],"pre-determined":[177],"threshold,":[178],"TimerScope":[180],"timer":[182],"activated":[186],"regularly":[187],"enable":[189],"process":[191],"schedule.":[192],"Both":[193],"techniques":[194],"adaptable":[196],"scenarios,":[200],"functioning":[201],"regardless":[202],"whether":[204],"attacker":[206,259],"victim":[208],"share":[209],"same":[211],"or":[213],"reside":[214],"separate":[216],"cores.":[217],"Last,":[218],"successfully":[220],"apply":[221],"them":[222],"mount":[224],"realistic":[225],"case":[226],"studies,":[227],"ranging":[228],"from":[229,263],"constructing":[230],"cross-core":[231],"covert":[232],"channels":[233],"breaking":[235],"kernel":[236],"address":[237],"space":[238],"layout":[239],"randomization.":[240],"also":[242],"successful":[244],"DNN":[245],"under":[249],"browser":[250],"scenarios":[251],"frequency":[254],"scaling":[255],"disabled":[257],"isolated":[262],"where":[266],"HertzBleed,":[268],"ThermalBleed,":[269],"ineffective.":[275]},"counts_by_year":[],"updated_date":"2026-07-27T08:26:11.824852","created_date":"2025-10-10T00:00:00"}
