{"id":"https://openalex.org/W4388858680","doi":"https://doi.org/10.1145/3576915.3616672","title":"T unne L s for B ootlegging: Fully Reverse-Engineering GPU TLBs for Challenging Isolation Guarantees of NVIDIA MIG","display_name":"T unne L s for B ootlegging: Fully Reverse-Engineering GPU TLBs for Challenging Isolation Guarantees of NVIDIA MIG","publication_year":2023,"publication_date":"2023-11-15","ids":{"openalex":"https://openalex.org/W4388858680","doi":"https://doi.org/10.1145/3576915.3616672"},"language":"en","primary_location":{"id":"doi:10.1145/3576915.3616672","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3576915.3616672","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3576915.3616672","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3576915.3616672","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101696649","display_name":"Zhenkai Zhang","orcid":"https://orcid.org/0000-0002-9025-3460"},"institutions":[{"id":"https://openalex.org/I8078737","display_name":"Clemson University","ror":"https://ror.org/037s24f05","country_code":"US","type":"education","lineage":["https://openalex.org/I8078737"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhenkai Zhang","raw_affiliation_strings":["Clemson University, Clemson, SC, USA"],"raw_orcid":"https://orcid.org/0000-0002-9025-3460","affiliations":[{"raw_affiliation_string":"Clemson University, Clemson, SC, USA","institution_ids":["https://openalex.org/I8078737"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041841083","display_name":"Tyler Allen","orcid":"https://orcid.org/0000-0002-0253-372X"},"institutions":[{"id":"https://openalex.org/I102149020","display_name":"University of North Carolina at Charlotte","ror":"https://ror.org/04dawnj30","country_code":"US","type":"education","lineage":["https://openalex.org/I102149020"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tyler Allen","raw_affiliation_strings":["University of North Carolina at Charlotte, Charlotte, NC, USA"],"raw_orcid":"https://orcid.org/0000-0002-0253-372X","affiliations":[{"raw_affiliation_string":"University of North Carolina at Charlotte, Charlotte, NC, USA","institution_ids":["https://openalex.org/I102149020"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033685295","display_name":"Fan Yao","orcid":"https://orcid.org/0000-0002-0360-5641"},"institutions":[{"id":"https://openalex.org/I106165777","display_name":"University of Central Florida","ror":"https://ror.org/036nfer12","country_code":"US","type":"education","lineage":["https://openalex.org/I106165777"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Fan Yao","raw_affiliation_strings":["University of Central Florida, Orlando, FL, USA"],"raw_orcid":"https://orcid.org/0000-0002-0360-5641","affiliations":[{"raw_affiliation_string":"University of Central Florida, Orlando, FL, USA","institution_ids":["https://openalex.org/I106165777"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003274478","display_name":"Xing Gao","orcid":"https://orcid.org/0009-0000-2574-029X"},"institutions":[{"id":"https://openalex.org/I86501945","display_name":"University of Delaware","ror":"https://ror.org/01sbq1a82","country_code":"US","type":"education","lineage":["https://openalex.org/I86501945"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xing Gao","raw_affiliation_strings":["University of Delaware, Newark, DE, USA"],"raw_orcid":"https://orcid.org/0009-0000-2574-029X","affiliations":[{"raw_affiliation_string":"University of Delaware, Newark, DE, USA","institution_ids":["https://openalex.org/I86501945"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5035001911","display_name":"Rong Ge","orcid":"https://orcid.org/0000-0002-2218-3675"},"institutions":[{"id":"https://openalex.org/I8078737","display_name":"Clemson University","ror":"https://ror.org/037s24f05","country_code":"US","type":"education","lineage":["https://openalex.org/I8078737"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Rong Ge","raw_affiliation_strings":["Clemson University, Clemson, SC, USA"],"raw_orcid":"https://orcid.org/0000-0002-2218-3675","affiliations":[{"raw_affiliation_string":"Clemson University, Clemson, SC, USA","institution_ids":["https://openalex.org/I8078737"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":5.7619,"has_fulltext":true,"cited_by_count":28,"citation_normalized_percentile":{"value":0.97130776,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"960","last_page":"974"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10502","display_name":"Advanced Memory and Neural Computing","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9932000041007996,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8482812643051147},{"id":"https://openalex.org/keywords/translation-lookaside-buffer","display_name":"Translation lookaside buffer","score":0.8456834554672241},{"id":"https://openalex.org/keywords/cuda","display_name":"CUDA","score":0.5066922307014465},{"id":"https://openalex.org/keywords/parallel-computing","display_name":"Parallel computing","score":0.47720083594322205},{"id":"https://openalex.org/keywords/reverse-engineering","display_name":"Reverse engineering","score":0.42639273405075073},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.41691142320632935},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.4052811563014984},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.32472896575927734},{"id":"https://openalex.org/keywords/physical-address","display_name":"Physical address","score":0.18190136551856995}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8482812643051147},{"id":"https://openalex.org/C116007543","wikidata":"https://www.wikidata.org/wiki/Q1071403","display_name":"Translation lookaside buffer","level":4,"score":0.8456834554672241},{"id":"https://openalex.org/C2778119891","wikidata":"https://www.wikidata.org/wiki/Q477690","display_name":"CUDA","level":2,"score":0.5066922307014465},{"id":"https://openalex.org/C173608175","wikidata":"https://www.wikidata.org/wiki/Q232661","display_name":"Parallel computing","level":1,"score":0.47720083594322205},{"id":"https://openalex.org/C207850805","wikidata":"https://www.wikidata.org/wiki/Q269608","display_name":"Reverse engineering","level":2,"score":0.42639273405075073},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.41691142320632935},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.4052811563014984},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.32472896575927734},{"id":"https://openalex.org/C41036726","wikidata":"https://www.wikidata.org/wiki/Q844824","display_name":"Physical address","level":3,"score":0.18190136551856995},{"id":"https://openalex.org/C136085584","wikidata":"https://www.wikidata.org/wiki/Q910289","display_name":"Overlay","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3576915.3616672","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3576915.3616672","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3576915.3616672","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3576915.3616672","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3576915.3616672","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3576915.3616672","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.5899999737739563}],"awards":[{"id":"https://openalex.org/G1945785479","display_name":"CNS Core: Small: Towards Secure-By-Design Integration of Emerging Non-Volatile Memory in Future Systems","funder_award_id":"2008339","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G4140178602","display_name":"CCF: EAGER:  DeepGreen: Modeling and Boosting Accelerated Computing on Liquid Immersion Cooled HPC Systems","funder_award_id":"1942182","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6093506638","display_name":"SaTC: CORE: Small: Leveraging Physical Side-Channel Information to Build Detection-Based Rowhammer Defenses","funder_award_id":"2147217","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4388858680.pdf","grobid_xml":"https://content.openalex.org/works/W4388858680.grobid-xml"},"referenced_works_count":22,"referenced_works":["https://openalex.org/W1494212869","https://openalex.org/W1871471646","https://openalex.org/W2004807638","https://openalex.org/W2047390994","https://openalex.org/W2050143636","https://openalex.org/W2100926301","https://openalex.org/W2110195531","https://openalex.org/W2163687928","https://openalex.org/W2337480911","https://openalex.org/W2537031054","https://openalex.org/W2610614018","https://openalex.org/W2612687770","https://openalex.org/W2766210752","https://openalex.org/W2793118248","https://openalex.org/W2891810898","https://openalex.org/W3046853140","https://openalex.org/W3097736620","https://openalex.org/W3102933117","https://openalex.org/W3166541059","https://openalex.org/W3166756206","https://openalex.org/W4283400329","https://openalex.org/W4288057791"],"related_works":["https://openalex.org/W3213381848","https://openalex.org/W2005148983","https://openalex.org/W2017587301","https://openalex.org/W2012954338","https://openalex.org/W2096672917","https://openalex.org/W2392023973","https://openalex.org/W2939411666","https://openalex.org/W1973046741","https://openalex.org/W2157802602","https://openalex.org/W4253302438"],"abstract_inverted_index":{"Recent":[0],"studies":[1],"have":[2],"revealed":[3],"much":[4],"detailed":[5],"information":[6],"about":[7],"the":[8,89,110,118,147,154,161,197,201,208,248,252,257],"translation":[9],"lookaside":[10],"buffers":[11],"(TLBs)":[12],"of":[13,22,52,78,88,149,183,251,259],"modern":[14,26],"CPUs,":[15],"but":[16],"we":[17,38,73,102,132,170,241],"find":[18,104],"that":[19,105,230],"many":[20],"properties":[21],"such":[23],"components":[24],"in":[25,57,98,121,262],"GPUs":[27,56],"still":[28,211],"remain":[29],"unknown":[30],"or":[31],"unclear.":[32],"To":[33,146],"fill":[34],"this":[35,125,152,237],"knowledge":[36],"gap,":[37],"develop":[39],"a":[40,50,75,122,137,165,177,181,189,218,227,243],"new":[41],"GPU":[42,70,81,91,96,202,265],"TLB":[43,71,130,254],"reverse-engineering":[44],"method":[45],"and":[46,54,59,68,128,169,225],"apply":[47],"it":[48],"to":[49,135,185,255],"variety":[51],"consumer-":[53],"server-grade":[55],"Turing":[58],"Ampere":[60],"generations.":[61],"Aside":[62],"from":[63,176],"learning":[64],"significantly":[65],"more":[66,213,219],"comprehensive":[67],"accurate":[69],"properties,":[72,131],"discover":[74],"design":[76,126],"flaw":[77,127],"NVIDIA":[79],"Multi-Instance":[80],"(MIG)":[82],"feature.":[83],"MIG":[84,106],"claims":[85],"full":[86],"partitioning":[87],"entire":[90],"memory":[92],"system":[93],"for":[94,140,203],"secure":[95],"sharing":[97],"cloud":[99,167],"computing.":[100],"However,":[101],"surprisingly":[103],"does":[107],"not":[108],"partition":[109],"last-level":[111,253],"TLB,":[112],"which":[113],"is":[114,153,199],"shared":[115],"by":[116],"all":[117],"compute":[119],"units":[120],"GPU.":[123],"Exploiting":[124],"learned":[129],"are":[133],"able":[134],"construct":[136],"covert":[138,238],"channel":[139],"data":[141,174,234],"exfiltration":[142,175,235],"across":[143],"MIG-enforced":[144],"isolation.":[145],"best":[148],"our":[150],"knowledge,":[151],"first":[155],"attack":[156,163],"on":[157,164,246],"MIG.":[158],"We":[159,223],"evaluate":[160],"proposed":[162],"commercial":[166],"platform,":[168],"successfully":[171],"achieve":[172],"reliable":[173],"victim":[178,198],"tenant":[179],"at":[180],"speed":[182],"up":[184],"31":[186],"kbps":[187,216],"with":[188,217],"very":[190],"high":[191],"accuracy":[192],"around":[193],"99.8%.":[194],"Even":[195],"when":[196],"using":[200],"deep":[204],"neural":[205],"network":[206],"training,":[207],"transmission":[209],"can":[210,231],"reach":[212],"than":[214,220],"25":[215],"99.5%":[221],"accuracy.":[222],"propose":[224],"implement":[226],"mitigation":[228],"approach":[229],"effectively":[232],"thwart":[233],"through":[236],"channel.":[239],"Additionally,":[240],"present":[242],"preliminary":[244],"study":[245],"exploiting":[247],"access":[249],"patterns":[250],"infer":[256],"identity":[258],"applications":[260],"running":[261],"other":[263],"MIG-created":[264],"instances.":[266]},"counts_by_year":[{"year":2026,"cited_by_count":11},{"year":2025,"cited_by_count":13},{"year":2024,"cited_by_count":4}],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2025-10-10T00:00:00"}