{"id":"https://openalex.org/W3106953047","doi":"https://doi.org/10.1145/3428215","title":"Exposing cache timing side-channel leaks through out-of-order symbolic execution","display_name":"Exposing cache timing side-channel leaks through out-of-order symbolic execution","publication_year":2020,"publication_date":"2020-11-13","ids":{"openalex":"https://openalex.org/W3106953047","doi":"https://doi.org/10.1145/3428215","mag":"3106953047"},"language":"en","primary_location":{"id":"doi:10.1145/3428215","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3428215","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3428215","source":{"id":"https://openalex.org/S4210216081","display_name":"Proceedings of the ACM on Programming Languages","issn_l":"2475-1421","issn":["2475-1421"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Programming Languages","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3428215","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5015125413","display_name":"Shengjian Guo","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shengjian Guo","raw_affiliation_strings":["Baidu Security, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Baidu Security, USA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041827624","display_name":"Yueqi Chen","orcid":"https://orcid.org/0000-0001-6975-2874"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yueqi Chen","raw_affiliation_strings":["Pennsylvania State University, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011605423","display_name":"Jiyong Yu","orcid":"https://orcid.org/0000-0002-9150-0662"},"institutions":[{"id":"https://openalex.org/I157725225","display_name":"University of Illinois Urbana-Champaign","ror":"https://ror.org/047426m28","country_code":"US","type":"education","lineage":["https://openalex.org/I157725225"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jiyong Yu","raw_affiliation_strings":["University of Illinois at Urbana-Champaign, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Illinois at Urbana-Champaign, USA","institution_ids":["https://openalex.org/I157725225"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017792083","display_name":"Meng Wu","orcid":"https://orcid.org/0000-0002-9841-5962"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Meng Wu","raw_affiliation_strings":["Ant Group, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ant Group, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037713727","display_name":"Zhiqiang Zuo","orcid":"https://orcid.org/0000-0002-4566-7488"},"institutions":[{"id":"https://openalex.org/I881766915","display_name":"Nanjing University","ror":"https://ror.org/01rxvg760","country_code":"CN","type":"education","lineage":["https://openalex.org/I881766915"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhiqiang Zuo","raw_affiliation_strings":["Nanjing University, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nanjing University, China","institution_ids":["https://openalex.org/I881766915"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100432795","display_name":"Peng Li","orcid":"https://orcid.org/0000-0003-4981-0496"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Peng Li","raw_affiliation_strings":["Baidu Security, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Baidu Security, USA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047799795","display_name":"Yueqiang Cheng","orcid":"https://orcid.org/0000-0002-6277-340X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yueqiang Cheng","raw_affiliation_strings":["Baidu Security, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Baidu Security, USA","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101669228","display_name":"Huibo Wang","orcid":"https://orcid.org/0009-0003-9912-6147"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Huibo Wang","raw_affiliation_strings":["Baidu Security, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Baidu Security, USA","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":8,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.8125,"has_fulltext":true,"cited_by_count":7,"citation_normalized_percentile":{"value":0.79765186,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":"4","issue":"OOPSLA","first_page":"1","last_page":"32"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10054","display_name":"Parallel Computing and Optimization Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11005","display_name":"Radiation Effects in Electronics","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8447072505950928},{"id":"https://openalex.org/keywords/cache","display_name":"Cache","score":0.776329755783081},{"id":"https://openalex.org/keywords/compiler","display_name":"Compiler","score":0.6565019488334656},{"id":"https://openalex.org/keywords/parallel-computing","display_name":"Parallel computing","score":0.6387232542037964},{"id":"https://openalex.org/keywords/symbolic-execution","display_name":"Symbolic execution","score":0.5805870890617371},{"id":"https://openalex.org/keywords/speculative-execution","display_name":"Speculative execution","score":0.5309255719184875},{"id":"https://openalex.org/keywords/pipeline","display_name":"Pipeline (software)","score":0.4788218140602112},{"id":"https://openalex.org/keywords/worst-case-execution-time","display_name":"Worst-case execution time","score":0.4699552059173584},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.46967560052871704},{"id":"https://openalex.org/keywords/cpu-cache","display_name":"CPU cache","score":0.4203239977359772},{"id":"https://openalex.org/keywords/out-of-order-execution","display_name":"Out-of-order execution","score":0.41331180930137634},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.35330986976623535},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.3377419412136078},{"id":"https://openalex.org/keywords/execution-time","display_name":"Execution time","score":0.3265719413757324},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.28735750913619995}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8447072505950928},{"id":"https://openalex.org/C115537543","wikidata":"https://www.wikidata.org/wiki/Q165596","display_name":"Cache","level":2,"score":0.776329755783081},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.6565019488334656},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.6387232542037964},{"id":"https://openalex.org/C2779639559","wikidata":"https://www.wikidata.org/wiki/Q7661178","display_name":"Symbolic execution","level":3,"score":0.5805870890617371},{"id":"https://openalex.org/C141331961","wikidata":"https://www.wikidata.org/wiki/Q2164465","display_name":"Speculative execution","level":2,"score":0.5309255719184875},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.4788218140602112},{"id":"https://openalex.org/C200130814","wikidata":"https://www.wikidata.org/wiki/Q362858","display_name":"Worst-case execution time","level":3,"score":0.4699552059173584},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.46967560052871704},{"id":"https://openalex.org/C189783530","wikidata":"https://www.wikidata.org/wiki/Q352090","display_name":"CPU cache","level":3,"score":0.4203239977359772},{"id":"https://openalex.org/C1793878","wikidata":"https://www.wikidata.org/wiki/Q1153762","display_name":"Out-of-order execution","level":2,"score":0.41331180930137634},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.35330986976623535},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.3377419412136078},{"id":"https://openalex.org/C2989134064","wikidata":"https://www.wikidata.org/wiki/Q288510","display_name":"Execution time","level":2,"score":0.3265719413757324},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.28735750913619995}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3428215","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3428215","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3428215","source":{"id":"https://openalex.org/S4210216081","display_name":"Proceedings of the ACM on Programming Languages","issn_l":"2475-1421","issn":["2475-1421"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Programming Languages","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3428215","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3428215","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3428215","source":{"id":"https://openalex.org/S4210216081","display_name":"Proceedings of the ACM on Programming Languages","issn_l":"2475-1421","issn":["2475-1421"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Programming Languages","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G161977233","display_name":null,"funder_award_id":"BK20191247","funder_id":"https://openalex.org/F4320322769","funder_display_name":"Natural Science Foundation of Jiangsu Province"},{"id":"https://openalex.org/G1888249465","display_name":"\u81ea\u6210\u957f\u590d\u6742\u8f6f\u4ef6\u7cfb\u7edf\u6784\u5efa\u65b9\u6cd5\u4e0e\u8fd0\u884c\u652f\u6491\u7814\u7a76","funder_award_id":"61932021","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3059242050","display_name":"\u57fa\u4e8eBig Code\u6df1\u5ea6\u80cc\u666f\u589e\u5f3a\u7684Android\u5e94\u7528\u4ee3\u7801\u53cd\u6df7\u6dc6\u7814\u7a76","funder_award_id":"61972290","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321605","display_name":"Government of Jiangsu Province","ror":"https://ror.org/004svx814"},{"id":"https://openalex.org/F4320322769","display_name":"Natural Science Foundation of Jiangsu Province","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3106953047.pdf","grobid_xml":"https://content.openalex.org/works/W3106953047.grobid-xml"},"referenced_works_count":89,"referenced_works":["https://openalex.org/W116061528","https://openalex.org/W156825290","https://openalex.org/W1427174644","https://openalex.org/W1488058190","https://openalex.org/W1488986397","https://openalex.org/W1549916137","https://openalex.org/W1553731663","https://openalex.org/W1613874182","https://openalex.org/W1710734607","https://openalex.org/W1751589996","https://openalex.org/W1811355673","https://openalex.org/W1884441681","https://openalex.org/W1989310296","https://openalex.org/W1995119232","https://openalex.org/W2003299277","https://openalex.org/W2032094184","https://openalex.org/W2047694629","https://openalex.org/W2059987590","https://openalex.org/W2061354941","https://openalex.org/W2061686717","https://openalex.org/W2064639033","https://openalex.org/W2076975659","https://openalex.org/W2095551048","https://openalex.org/W2095906375","https://openalex.org/W2101512909","https://openalex.org/W2105552602","https://openalex.org/W2113864883","https://openalex.org/W2116998907","https://openalex.org/W2117285153","https://openalex.org/W2128255161","https://openalex.org/W2129747874","https://openalex.org/W2159772935","https://openalex.org/W2169461225","https://openalex.org/W2169870841","https://openalex.org/W2173501262","https://openalex.org/W2176684476","https://openalex.org/W2217374585","https://openalex.org/W2243965201","https://openalex.org/W2294921903","https://openalex.org/W2337480911","https://openalex.org/W2343729057","https://openalex.org/W2469237961","https://openalex.org/W2546922927","https://openalex.org/W2574017551","https://openalex.org/W2603394416","https://openalex.org/W2605815030","https://openalex.org/W2612687770","https://openalex.org/W2626217303","https://openalex.org/W2735733036","https://openalex.org/W2740847919","https://openalex.org/W2751989915","https://openalex.org/W2753573171","https://openalex.org/W2758227629","https://openalex.org/W2766853874","https://openalex.org/W2863410800","https://openalex.org/W2883185786","https://openalex.org/W2883613460","https://openalex.org/W2883947318","https://openalex.org/W2885297972","https://openalex.org/W2888798936","https://openalex.org/W2897675008","https://openalex.org/W2899157124","https://openalex.org/W2910752585","https://openalex.org/W2914982603","https://openalex.org/W2925685215","https://openalex.org/W2946031616","https://openalex.org/W2947155194","https://openalex.org/W2954478959","https://openalex.org/W2962722502","https://openalex.org/W2963311060","https://openalex.org/W2964177714","https://openalex.org/W2965388072","https://openalex.org/W2967234179","https://openalex.org/W2972034624","https://openalex.org/W2981343730","https://openalex.org/W2989703616","https://openalex.org/W3015465581","https://openalex.org/W3035655869","https://openalex.org/W3036266772","https://openalex.org/W3090475639","https://openalex.org/W3098582260","https://openalex.org/W3100704941","https://openalex.org/W3101072679","https://openalex.org/W4246166885","https://openalex.org/W4248755866","https://openalex.org/W6658560632","https://openalex.org/W6669926382","https://openalex.org/W6744447974","https://openalex.org/W6753443810"],"related_works":["https://openalex.org/W1515433387","https://openalex.org/W2006417047","https://openalex.org/W1663166257","https://openalex.org/W1484796814","https://openalex.org/W345638404","https://openalex.org/W166889777","https://openalex.org/W2130556870","https://openalex.org/W115724294","https://openalex.org/W2133076265","https://openalex.org/W1549916137"],"abstract_inverted_index":{"As":[0],"one":[1],"of":[2,70,86,118],"the":[3,9,13,31,40,68,80,91,139,160],"fundamental":[4],"optimizations":[5,137],"in":[6,20,24,122,131],"modern":[7],"processors,":[8],"out-of-order":[10,71,94],"execution":[11,149],"boosts":[12],"pipeline":[14],"throughput":[15],"by":[16,35],"executing":[17],"independent":[18],"instructions":[19],"parallel":[21],"rather":[22],"than":[23],"their":[25],"program":[26,88,133],"orders.":[27],"However,":[28],"due":[29],"to":[30,39,90,141],"side":[32],"effects":[33],"introduced":[34],"such":[36],"microarchitectural":[37],"optimization":[38],"CPU":[41],"cache,":[42],"secret-critical":[43],"applications":[44],"may":[45],"suffer":[46],"from":[47,135],"timing":[48,65,120,142],"side-channel":[49],"leaks.":[50,143],"This":[51],"paper":[52],"presents":[53],"a":[54,116,147],"symbolic":[55],"execution-based":[56],"technique,":[57],"named":[58],"SymO":[59,73,98,112,127,151],"3":[60,74,99,113,128,152],",":[61],"for":[62],"exposing":[63],"cache":[64,119],"leaks":[66,121],"under":[67],"context":[69],"execution.":[72],"proposes":[75],"new":[76],"components":[77],"that":[78,111],"address":[79],"modeling,":[81,150],"reduction,":[82],"and":[83,102],"reasoning":[84],"challenges":[85],"accommodating":[87],"analysis":[89],"software":[92],"code":[93],"analysis.":[95,162],"We":[96],"implemented":[97],"upon":[100],"KLEE":[101],"conducted":[103],"three":[104],"evaluations":[105],"on":[106,159],"it.":[107],"Experimental":[108],"results":[109],"show":[110],"successfully":[114],"uncovers":[115],"set":[117],"five":[123,154],"real-world":[124],"programs.":[125],"Also,":[126],"finds":[129],"that,":[130],"general,":[132],"transformation":[134],"compiler":[136],"shrink":[138],"surface":[140],"Furthermore,":[144],"augmented":[145],"with":[146],"speculative":[148],"identifies":[153],"more":[155],"leaky":[156],"programs":[157],"based":[158],"compound":[161]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":3}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}