{"id":"https://openalex.org/W3206865846","doi":"https://doi.org/10.1145/3485506","title":"SpecSafe: detecting cache side channels in a speculative world","display_name":"SpecSafe: detecting cache side channels in a speculative world","publication_year":2021,"publication_date":"2021-10-15","ids":{"openalex":"https://openalex.org/W3206865846","doi":"https://doi.org/10.1145/3485506","mag":"3206865846"},"language":"en","primary_location":{"id":"doi:10.1145/3485506","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3485506","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3485506","source":{"id":"https://openalex.org/S4210216081","display_name":"Proceedings of the ACM on Programming Languages","issn_l":"2475-1421","issn":["2475-1421"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Programming Languages","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3485506","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5090123220","display_name":"Robert Brotzman","orcid":null},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Robert Brotzman","raw_affiliation_strings":["Pennsylvania State University, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100722775","display_name":"Danfeng Zhang","orcid":"https://orcid.org/0000-0003-1942-6872"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Danfeng Zhang","raw_affiliation_strings":["Pennsylvania State University, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007116603","display_name":"Mahmut Kandemir","orcid":"https://orcid.org/0000-0002-9940-9951"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mahmut Taylan Kandemir","raw_affiliation_strings":["Pennsylvania State University, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5010830558","display_name":"Gang Tan","orcid":"https://orcid.org/0000-0001-6109-6091"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gang Tan","raw_affiliation_strings":["Pennsylvania State University, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University, USA","institution_ids":["https://openalex.org/I130769515"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I130769515"],"apc_list":null,"apc_paid":null,"fwci":0.273,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.63572449,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":96},"biblio":{"volume":"5","issue":"OOPSLA","first_page":"1","last_page":"28"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10502","display_name":"Advanced Memory and Neural Computing","score":0.9884999990463257,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9787999987602234,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8469264507293701},{"id":"https://openalex.org/keywords/speculation","display_name":"Speculation","score":0.7654106616973877},{"id":"https://openalex.org/keywords/speculative-execution","display_name":"Speculative execution","score":0.7245325446128845},{"id":"https://openalex.org/keywords/side-channel-attack","display_name":"Side channel attack","score":0.7220522165298462},{"id":"https://openalex.org/keywords/cache","display_name":"Cache","score":0.6937708854675293},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.5022428035736084},{"id":"https://openalex.org/keywords/speculative-multithreading","display_name":"Speculative multithreading","score":0.4779632091522217},{"id":"https://openalex.org/keywords/cache-invalidation","display_name":"Cache invalidation","score":0.47570735216140747},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.45292818546295166},{"id":"https://openalex.org/keywords/cache-pollution","display_name":"Cache pollution","score":0.4208245873451233},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.4160858392715454},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.410926878452301},{"id":"https://openalex.org/keywords/cache-algorithms","display_name":"Cache algorithms","score":0.4038046896457672},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.3411024510860443},{"id":"https://openalex.org/keywords/cpu-cache","display_name":"CPU cache","score":0.2740215063095093},{"id":"https://openalex.org/keywords/parallel-computing","display_name":"Parallel computing","score":0.2683669328689575},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.17414456605911255},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.17409124970436096},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.06882268190383911}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8469264507293701},{"id":"https://openalex.org/C47941915","wikidata":"https://www.wikidata.org/wiki/Q107885","display_name":"Speculation","level":2,"score":0.7654106616973877},{"id":"https://openalex.org/C141331961","wikidata":"https://www.wikidata.org/wiki/Q2164465","display_name":"Speculative execution","level":2,"score":0.7245325446128845},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.7220522165298462},{"id":"https://openalex.org/C115537543","wikidata":"https://www.wikidata.org/wiki/Q165596","display_name":"Cache","level":2,"score":0.6937708854675293},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.5022428035736084},{"id":"https://openalex.org/C15296174","wikidata":"https://www.wikidata.org/wiki/Q7575343","display_name":"Speculative multithreading","level":4,"score":0.4779632091522217},{"id":"https://openalex.org/C25536678","wikidata":"https://www.wikidata.org/wiki/Q5015977","display_name":"Cache invalidation","level":5,"score":0.47570735216140747},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.45292818546295166},{"id":"https://openalex.org/C113166858","wikidata":"https://www.wikidata.org/wiki/Q5015981","display_name":"Cache pollution","level":5,"score":0.4208245873451233},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.4160858392715454},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.410926878452301},{"id":"https://openalex.org/C38556500","wikidata":"https://www.wikidata.org/wiki/Q13404475","display_name":"Cache algorithms","level":4,"score":0.4038046896457672},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.3411024510860443},{"id":"https://openalex.org/C189783530","wikidata":"https://www.wikidata.org/wiki/Q352090","display_name":"CPU cache","level":3,"score":0.2740215063095093},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.2683669328689575},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.17414456605911255},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.17409124970436096},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.06882268190383911},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C139719470","wikidata":"https://www.wikidata.org/wiki/Q39680","display_name":"Macroeconomics","level":1,"score":0.0},{"id":"https://openalex.org/C138101251","wikidata":"https://www.wikidata.org/wiki/Q213092","display_name":"Thread (computing)","level":2,"score":0.0},{"id":"https://openalex.org/C201410400","wikidata":"https://www.wikidata.org/wiki/Q1064412","display_name":"Multithreading","level":3,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3485506","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3485506","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3485506","source":{"id":"https://openalex.org/S4210216081","display_name":"Proceedings of the ACM on Programming Languages","issn_l":"2475-1421","issn":["2475-1421"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Programming Languages","raw_type":"journal-article"},{"id":"pmh:oai:scholarsphere.psu.edu:e7b1ef0d-360c-483e-b146-0b2dc1118b27","is_oa":false,"landing_page_url":"https://scholarsphere.psu.edu/resources/e7b1ef0d-360c-483e-b146-0b2dc1118b27","pdf_url":null,"source":{"id":"https://openalex.org/S4306401507","display_name":"ScholarSphere (Penn State Libraries)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I3130638595","host_organization_name":"Pangasinan State University","host_organization_lineage":["https://openalex.org/I3130638595"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"}],"best_oa_location":{"id":"doi:10.1145/3485506","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3485506","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3485506","source":{"id":"https://openalex.org/S4210216081","display_name":"Proceedings of the ACM on Programming Languages","issn_l":"2475-1421","issn":["2475-1421"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Programming Languages","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.800000011920929,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G5887816109","display_name":null,"funder_award_id":"CNS-1801534, CNS-1956032, CNS-1942851, CNS-1816282, CCF-1723571","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3206865846.pdf","grobid_xml":"https://content.openalex.org/works/W3206865846.grobid-xml"},"referenced_works_count":44,"referenced_works":["https://openalex.org/W1427174644","https://openalex.org/W1488058190","https://openalex.org/W1488986397","https://openalex.org/W1519539754","https://openalex.org/W1531820677","https://openalex.org/W1533145153","https://openalex.org/W1613874182","https://openalex.org/W1934458198","https://openalex.org/W1977764760","https://openalex.org/W1992291252","https://openalex.org/W2037322308","https://openalex.org/W2119028650","https://openalex.org/W2131202839","https://openalex.org/W2153185479","https://openalex.org/W2154909745","https://openalex.org/W2172060328","https://openalex.org/W2292672296","https://openalex.org/W2294921903","https://openalex.org/W2460965380","https://openalex.org/W2594560662","https://openalex.org/W2606774910","https://openalex.org/W2612094043","https://openalex.org/W2735733036","https://openalex.org/W2753573171","https://openalex.org/W2769061097","https://openalex.org/W2803913377","https://openalex.org/W2810584084","https://openalex.org/W2884163605","https://openalex.org/W2884530475","https://openalex.org/W2903910116","https://openalex.org/W2925685215","https://openalex.org/W2950775255","https://openalex.org/W2964590009","https://openalex.org/W2971539790","https://openalex.org/W2985509521","https://openalex.org/W3013286660","https://openalex.org/W3015465581","https://openalex.org/W3016059855","https://openalex.org/W3034103899","https://openalex.org/W3035655869","https://openalex.org/W3088268709","https://openalex.org/W3096867085","https://openalex.org/W3097990693","https://openalex.org/W3101072679"],"related_works":["https://openalex.org/W2033801100","https://openalex.org/W2124112831","https://openalex.org/W2133489088","https://openalex.org/W2363769136","https://openalex.org/W3085471909","https://openalex.org/W2369103246","https://openalex.org/W2115222420","https://openalex.org/W2106444886","https://openalex.org/W2126408955","https://openalex.org/W2031173804"],"abstract_inverted_index":{"The":[0],"high-profile":[1],"Spectre":[2],"attack":[3],"and":[4,111,153],"its":[5],"variants":[6],"have":[7],"revealed":[8],"that":[9,56,136],"speculative":[10,33],"execution":[11],"may":[12],"leave":[13],"secret-dependent":[14],"footprints":[15],"in":[16],"the":[17,120],"cache,":[18],"allowing":[19],"an":[20],"attacker":[21],"to":[22,36,46,60,106,118,149],"learn":[23],"confidential":[24],"data.":[25],"However,":[26],"existing":[27,73],"static":[28,64],"side-channel":[29,97,144],"detectors":[30],"either":[31],"ignore":[32],"execution,":[34],"leading":[35,45],"false":[37,47],"negatives,":[38],"or":[39],"lack":[40],"a":[41,62,70,89,107,131,156],"precise":[42,67],"cache":[43,68,80,112],"model,":[44],"positives.":[48],"In":[49],"this":[50,85],"paper,":[51],"somewhat":[52],"surprisingly,":[53],"we":[54,87],"show":[55],"it":[57],"is":[58,104,147],"challenging":[59],"develop":[61,116],"speculation-aware":[63,126],"analysis":[65],"with":[66],"models:":[69],"combination":[71],"of":[72,93,109,122,158],"works":[74],"does":[75],"not":[76],"necessarily":[77],"catch":[78],"all":[79],"side":[81],"channels.":[82],"Motivated":[83],"by":[84,142],"observation,":[86],"present":[88],"new":[90],"semantic":[91],"definition":[92],"security":[94],"against":[95],"cache-based":[96],"attacks,":[98],"called":[99],"Speculative-Aware":[100],"noninterference":[101],"(SANI),":[102],"which":[103],"applicable":[105],"variety":[108],"attacks":[110],"models.":[113],"We":[114],"also":[115],"SpecSafe":[117,129,146],"detect":[119],"violations":[121],"SANI.":[123],"Unlike":[124],"other":[125],"symbolic":[127],"executors,":[128],"employs":[130],"novel":[132],"program":[133],"transformation":[134],"so":[135],"SANI":[137],"can":[138],"be":[139,150],"soundly":[140],"checked":[141],"speculation-unaware":[143],"detectors.":[145],"shown":[148],"both":[151],"scalable":[152],"accurate":[154],"on":[155],"set":[157],"moderately":[159],"sized":[160],"benchmarks,":[161],"including":[162],"commonly":[163],"used":[164],"cryptography":[165],"libraries.":[166]},"counts_by_year":[{"year":2023,"cited_by_count":2}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}