{"id":"https://openalex.org/W7077067262","doi":"https://doi.org/10.1109/tifs.2025.3598478","title":"SCSGuardian: A Practical Hardware Defense Against Speculative Cache Side-Channel Attacks","display_name":"SCSGuardian: A Practical Hardware Defense Against Speculative Cache Side-Channel Attacks","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W7077067262","doi":"https://doi.org/10.1109/tifs.2025.3598478"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2025.3598478","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3598478","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Xiaoyu Cheng","orcid":"https://orcid.org/0009-0007-7780-4065"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoyu Cheng","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University, Nanjing, Jiangsu, China"],"raw_orcid":"https://orcid.org/0009-0007-7780-4065","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, Jiangsu, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Fei Tong","orcid":"https://orcid.org/0000-0002-0629-4543"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fei Tong","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University, Nanjing, Jiangsu, China"],"raw_orcid":"https://orcid.org/0000-0002-0629-4543","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, Jiangsu, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Zhe Zhou","orcid":"https://orcid.org/0009-0006-8926-4695"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhe Zhou","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University, Nanjing, Jiangsu, China"],"raw_orcid":"https://orcid.org/0009-0006-8926-4695","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, Jiangsu, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Fang Jiang","orcid":null},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fang Jiang","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University, Nanjing, Jiangsu, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, Jiangsu, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Hongyu Wang","orcid":"https://orcid.org/0000-0002-6209-6859"},"institutions":[{"id":"https://openalex.org/I4210140129","display_name":"Empowerment Program","ror":"https://ror.org/042qv2836","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I4210140129"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hongyu Wang","raw_affiliation_strings":["Nanjing Unipower Information Technology Company Ltd., Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-6209-6859","affiliations":[{"raw_affiliation_string":"Nanjing Unipower Information Technology Company Ltd., Nanjing, China","institution_ids":["https://openalex.org/I4210140129"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Guang Cheng","orcid":"https://orcid.org/0000-0001-8642-4362"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guang Cheng","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University, Nanjing, Jiangsu, China"],"raw_orcid":"https://orcid.org/0000-0001-8642-4362","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, Jiangsu, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"last","author":{"id":null,"display_name":"Yuxing Mao","orcid":"https://orcid.org/0000-0002-1829-4719"},"institutions":[{"id":"https://openalex.org/I158842170","display_name":"Chongqing University","ror":"https://ror.org/023rhb549","country_code":"CN","type":"education","lineage":["https://openalex.org/I158842170"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuxing Mao","raw_affiliation_strings":["State Key Laboratory of Power Transmission Equipment Technology, Chongqing University, Chongqing, China"],"raw_orcid":"https://orcid.org/0000-0002-1829-4719","affiliations":[{"raw_affiliation_string":"State Key Laboratory of Power Transmission Equipment Technology, Chongqing University, Chongqing, China","institution_ids":["https://openalex.org/I158842170"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.396,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.87786267,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":"20","issue":null,"first_page":"8833","last_page":"8847"},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":{"id":"https://openalex.org/T12157","display_name":"Geochemistry and Geologic Mapping","score":0.6320000290870667,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12157","display_name":"Geochemistry and Geologic Mapping","score":0.6320000290870667,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13067","display_name":"Geological Modeling and Analysis","score":0.03280000016093254,"subfield":{"id":"https://openalex.org/subfields/1906","display_name":"Geochemistry and Petrology"},"field":{"id":"https://openalex.org/fields/19","display_name":"Earth and Planetary Sciences"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14311","display_name":"Electrical and Electromagnetic Research","score":0.01860000006854534,"subfield":{"id":"https://openalex.org/subfields/3107","display_name":"Atomic and Molecular Physics, and Optics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6625999808311462},{"id":"https://openalex.org/keywords/cache","display_name":"Cache","score":0.6517000198364258},{"id":"https://openalex.org/keywords/memory-protection","display_name":"Memory protection","score":0.4546000063419342},{"id":"https://openalex.org/keywords/speculative-execution","display_name":"Speculative execution","score":0.40939998626708984},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.3961000144481659},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.3578000068664551},{"id":"https://openalex.org/keywords/physical-address","display_name":"Physical address","score":0.34290000796318054},{"id":"https://openalex.org/keywords/bus-sniffing","display_name":"Bus sniffing","score":0.33059999346733093}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8769999742507935},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6625999808311462},{"id":"https://openalex.org/C115537543","wikidata":"https://www.wikidata.org/wiki/Q165596","display_name":"Cache","level":2,"score":0.6517000198364258},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.5041000247001648},{"id":"https://openalex.org/C18131444","wikidata":"https://www.wikidata.org/wiki/Q163585","display_name":"Memory protection","level":5,"score":0.4546000063419342},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4481000006198883},{"id":"https://openalex.org/C141331961","wikidata":"https://www.wikidata.org/wiki/Q2164465","display_name":"Speculative execution","level":2,"score":0.40939998626708984},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.3961000144481659},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.35910001397132874},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3578000068664551},{"id":"https://openalex.org/C41036726","wikidata":"https://www.wikidata.org/wiki/Q844824","display_name":"Physical address","level":3,"score":0.34290000796318054},{"id":"https://openalex.org/C51185590","wikidata":"https://www.wikidata.org/wiki/Q1017228","display_name":"Bus sniffing","level":5,"score":0.33059999346733093},{"id":"https://openalex.org/C189783530","wikidata":"https://www.wikidata.org/wiki/Q352090","display_name":"CPU cache","level":3,"score":0.3255000114440918},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.29490000009536743},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.2881999909877777},{"id":"https://openalex.org/C39217717","wikidata":"https://www.wikidata.org/wiki/Q1432354","display_name":"Hardware security module","level":3,"score":0.28610000014305115},{"id":"https://openalex.org/C176649486","wikidata":"https://www.wikidata.org/wiki/Q2308807","display_name":"Memory management","level":3,"score":0.27970001101493835},{"id":"https://openalex.org/C3720319","wikidata":"https://www.wikidata.org/wiki/Q5015937","display_name":"Cache-only memory architecture","level":5,"score":0.27720001339912415},{"id":"https://openalex.org/C2778012447","wikidata":"https://www.wikidata.org/wiki/Q1034415","display_name":"Scope (computer science)","level":2,"score":0.26750001311302185},{"id":"https://openalex.org/C76399640","wikidata":"https://www.wikidata.org/wiki/Q189401","display_name":"Virtual memory","level":4,"score":0.2563000023365021},{"id":"https://openalex.org/C36340418","wikidata":"https://www.wikidata.org/wiki/Q7124288","display_name":"Page cache","level":5,"score":0.2531000077724457},{"id":"https://openalex.org/C201148951","wikidata":"https://www.wikidata.org/wiki/Q5015976","display_name":"Cache coloring","level":4,"score":0.2515000104904175}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2025.3598478","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2025.3598478","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5752536444","display_name":null,"funder_award_id":"62472088","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7558634544","display_name":null,"funder_award_id":"U22B2025","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W2106728965","https://openalex.org/W2337480911","https://openalex.org/W2795015774","https://openalex.org/W2884163605","https://openalex.org/W2903035991","https://openalex.org/W2903910116","https://openalex.org/W2904129921","https://openalex.org/W2934166125","https://openalex.org/W2954241526","https://openalex.org/W2963311060","https://openalex.org/W2978325751","https://openalex.org/W2979633637","https://openalex.org/W2989861912","https://openalex.org/W3008383151","https://openalex.org/W3015216799","https://openalex.org/W3015844221","https://openalex.org/W3027968530","https://openalex.org/W3097783227","https://openalex.org/W3130643822","https://openalex.org/W3142335786","https://openalex.org/W3152901657","https://openalex.org/W3153564332","https://openalex.org/W3159033757","https://openalex.org/W3160448675","https://openalex.org/W3211301023","https://openalex.org/W4232120412","https://openalex.org/W4288086178","https://openalex.org/W4309073410","https://openalex.org/W4323896464","https://openalex.org/W4380881134","https://openalex.org/W4393406863","https://openalex.org/W4404134127"],"related_works":[],"abstract_inverted_index":{"Speculative":[0],"execution":[1],"introduces":[2],"serious":[3],"security":[4,224],"vulnerabilities,":[5],"particularly":[6],"in":[7,42,47,76,232,287],"the":[8,18,21,103,119,183,195,251,288,295],"form":[9],"of":[10,20,105,150,182,194,259,275],"speculative":[11,90,130,169],"cache":[12,22,196,202],"side-channel":[13],"(SCS)":[14],"attacks,":[15,80],"which":[16,166],"exploit":[17],"states":[19,193],"system":[23,203],"to":[24,51,83],"leak":[25],"sensitive":[26],"data":[27],"from":[28,205],"a":[29,63,122],"victim\u2019s":[30],"memory":[31,91,131,170,184,213],"space.":[32],"Existing":[33],"hardware":[34,65,154,256],"defense":[35,66],"solutions":[36],"against":[37,68,78,250],"SCS":[38,69,79,151,206,252],"attacks":[39,207,253],"remain":[40],"limited":[41],"effectively":[43],"addressing":[44],"these":[45],"threats":[46],"real-world":[48],"scenarios":[49],"due":[50],"their":[52,189],"significant":[53],"overhead":[54],"and/or":[55],"inadequate":[56],"security.":[57],"Therefore,":[58],"this":[59],"paper":[60],"proposes":[61],"SCSGuardian,":[62],"practical":[64],"framework":[67],"attacks.":[70,152],"SCSGuardian":[71,228,245,270],"addresses":[72],"two":[73,233],"key":[74],"issues":[75],"defending":[77],"i.e.,":[81,235],"when":[82],"initiate":[84],"and":[85,101,147,237,241,247,263,278,280,284,294],"lift":[86],"protection":[87,116],"for":[88,127],"unsafe":[89,129,168],"access":[92,132,171,185,214],"micro-operations":[93],"(<inline-formula":[94],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[95,108,134,156,173,216],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">":[96,109,135,157,174,217],"<tex-math":[97,110,136,158,175,218],"notation=\"LaTeX\">$\\mu":[98,111,137,159,176,219],"$":[99,112,138,160,177,220],"</tex-math></inline-formula>ops),":[100],"what":[102],"scope":[104],"such":[106],"<inline-formula":[107,133,155,172,215],"</tex-math></inline-formula>ops":[113,139,178],"that":[114],"require":[115],"is.":[117],"On":[118],"above":[120],"basis,":[121],"low-overhead":[123],"method":[124],"is":[125],"proposed":[126],"tracking":[128],"based":[140,187],"on":[141,188,191,212,268],"various":[142,192],"speculation":[143],"windows":[144],"within":[145],"processors":[146],"attack":[148],"principles":[149],"Tailored":[153],"</tex-math></inline-formula>op-delaying":[161],"strategies":[162,199],"are":[163],"then":[164],"proposed,":[165],"delay":[167],"at":[179],"different":[180],"stages":[181],"pipeline":[186],"impact":[190],"system.":[197],"These":[198],"efficiently":[200],"protect":[201],"components":[204],"while":[208],"avoiding":[209],"unnecessary":[210],"delays":[211],"</tex-math></inline-formula>ops,":[221],"ensuring":[222],"comprehensive":[223],"with":[225,254],"optimized":[226],"performance.":[227],"has":[229],"been":[230],"implemented":[231],"versions,":[234],"v1":[236,246,271],"v2,":[238],"targeting":[239],"single-core":[240],"multi-core":[242],"processors,":[243],"respectively.":[244,266,302],"v2":[248,281],"defend":[249],"negligible":[255],"resource":[257],"overheads":[258,274],"only":[260,276,282],"0.111":[261],"%":[262],"0.268":[264],"%,":[265],"Moreover,":[267],"SPEC2017,":[269],"exhibits":[272],"performance":[273],"4.62%":[277],"3.82%,":[279],"5.97%":[283],"5.47%,":[285],"both":[286],"RISC-V":[289],"core-based":[290],"FPGA":[291],"prototype":[292],"experiment":[293],"x86":[296],"out-of-order":[297],"CPU":[298],"model-based":[299],"Gem5":[300],"simulation,":[301]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2025-12-28T23:10:05.387466","created_date":"2025-10-10T00:00:00"}
