{"id":"https://openalex.org/W4400121686","doi":"https://doi.org/10.1145/3634737.3661139","title":"PowSpectre: Powering Up Speculation Attacks with TSX-based Replay","display_name":"PowSpectre: Powering Up Speculation Attacks with TSX-based Replay","publication_year":2024,"publication_date":"2024-06-28","ids":{"openalex":"https://openalex.org/W4400121686","doi":"https://doi.org/10.1145/3634737.3661139"},"language":"en","primary_location":{"id":"doi:10.1145/3634737.3661139","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3634737.3661139","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5066717795","display_name":"Md Hafizul Islam Chowdhuryy","orcid":"https://orcid.org/0000-0002-6132-3343"},"institutions":[{"id":"https://openalex.org/I106165777","display_name":"University of Central Florida","ror":"https://ror.org/036nfer12","country_code":"US","type":"education","lineage":["https://openalex.org/I106165777"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Md Hafizul Islam Chowdhuryy","raw_affiliation_strings":["University of Central Florida, Orlando, United States of America"],"raw_orcid":"https://orcid.org/0000-0002-6132-3343","affiliations":[{"raw_affiliation_string":"University of Central Florida, Orlando, United States of America","institution_ids":["https://openalex.org/I106165777"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101696649","display_name":"Zhenkai Zhang","orcid":"https://orcid.org/0000-0002-9025-3460"},"institutions":[{"id":"https://openalex.org/I8078737","display_name":"Clemson University","ror":"https://ror.org/037s24f05","country_code":"US","type":"education","lineage":["https://openalex.org/I8078737"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhenkai Zhang","raw_affiliation_strings":["Clemson University, Clemson, United States of America"],"raw_orcid":"https://orcid.org/0000-0002-9025-3460","affiliations":[{"raw_affiliation_string":"Clemson University, Clemson, United States of America","institution_ids":["https://openalex.org/I8078737"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5033685295","display_name":"Fan Yao","orcid":"https://orcid.org/0000-0002-0360-5641"},"institutions":[{"id":"https://openalex.org/I106165777","display_name":"University of Central Florida","ror":"https://ror.org/036nfer12","country_code":"US","type":"education","lineage":["https://openalex.org/I106165777"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Fan Yao","raw_affiliation_strings":["University of Central Florida, Orlando, United States of America"],"raw_orcid":"https://orcid.org/0000-0002-0360-5641","affiliations":[{"raw_affiliation_string":"University of Central Florida, Orlando, United States of America","institution_ids":["https://openalex.org/I106165777"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.0483,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.76906991,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"498","last_page":"511"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9934999942779541,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/speculation","display_name":"Speculation","score":0.867894172668457},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6409095525741577},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.13712561130523682},{"id":"https://openalex.org/keywords/finance","display_name":"Finance","score":0.08405545353889465}],"concepts":[{"id":"https://openalex.org/C47941915","wikidata":"https://www.wikidata.org/wiki/Q107885","display_name":"Speculation","level":2,"score":0.867894172668457},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6409095525741577},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.13712561130523682},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.08405545353889465}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3634737.3661139","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3634737.3661139","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th ACM Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1945785479","display_name":"CNS Core: Small: Towards Secure-By-Design Integration of Emerging Non-Volatile Memory in Future Systems","funder_award_id":"2008339","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6093506638","display_name":"SaTC: CORE: Small: Leveraging Physical Side-Channel Information to Build Detection-Based Rowhammer Defenses","funder_award_id":"2147217","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":43,"referenced_works":["https://openalex.org/W1488058190","https://openalex.org/W1537808739","https://openalex.org/W1934458198","https://openalex.org/W2014182302","https://openalex.org/W2017371166","https://openalex.org/W2056778557","https://openalex.org/W2255548496","https://openalex.org/W2529582363","https://openalex.org/W2599829375","https://openalex.org/W2615272193","https://openalex.org/W2769061097","https://openalex.org/W2795015774","https://openalex.org/W2810584084","https://openalex.org/W2901937773","https://openalex.org/W2903910116","https://openalex.org/W2906372616","https://openalex.org/W2935014333","https://openalex.org/W2949090999","https://openalex.org/W2954241526","https://openalex.org/W2963311060","https://openalex.org/W2988187473","https://openalex.org/W3001127848","https://openalex.org/W3016293720","https://openalex.org/W3034103899","https://openalex.org/W3103430139","https://openalex.org/W3117764131","https://openalex.org/W3145598683","https://openalex.org/W3153001680","https://openalex.org/W3162979535","https://openalex.org/W3166756206","https://openalex.org/W3210462562","https://openalex.org/W4234837181","https://openalex.org/W4242926647","https://openalex.org/W4282968709","https://openalex.org/W4283400329","https://openalex.org/W4287753023","https://openalex.org/W4288057791","https://openalex.org/W4288086178","https://openalex.org/W4300193475","https://openalex.org/W4310929261","https://openalex.org/W4317794511","https://openalex.org/W4385080326","https://openalex.org/W4389162411"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W4243792164","https://openalex.org/W2147782221","https://openalex.org/W2076161440","https://openalex.org/W3107943460","https://openalex.org/W2799624154","https://openalex.org/W4250172181","https://openalex.org/W2489870153","https://openalex.org/W3091416521"],"abstract_inverted_index":{"Trusted":[0],"execution":[1,37,137],"environment":[2],"(TEE)":[3],"offers":[4],"data":[5,151],"protection":[6],"against":[7],"malicious":[8],"system":[9],"software.":[10],"However,":[11],"the":[12,28,74,154,205,210,216],"TEE":[13],"(e.g.,":[14,52],"Intel":[15,94],"SGX)":[16],"threat":[17],"model":[18],"exacerbates":[19],"information":[20],"leakage":[21],"as":[22,99],"attackers":[23],"can":[24,96,147,173],"enhance":[25],"and":[26,72,117,191],"denoise":[27],"observations":[29],"from":[30,49],"hardware-based":[31],"side":[32,47,142],"channels":[33,48,143],"through":[34],"controlled":[35],"victim":[36],"(i.e.,":[38,93],"replay).":[39],"The":[40],"replay":[41,79,103,120],"mechanism":[42],"is":[43],"especially":[44],"critical":[45],"for":[46,65,81,90,105,122,200],"physical":[50],"traces":[51],"power":[53,141,198],"consumption)":[54],"that":[55,87,146,171,196],"not":[56],"only":[57],"vary":[58],"instantaneously":[59],"but":[60],"also":[61],"necessitate":[62],"successive":[63],"modulation":[64],"observability.":[66],"In":[67],"this":[68,110],"paper,":[69],"we":[70,112,130],"identify":[71,192],"characterize":[73],"key":[75],"limitations":[76],"of":[77,128,212,218],"existing":[78],"techniques":[80],"speculation":[82,213],"attacks.":[83],"Our":[84,168,202],"study":[85],"unveils":[86],"architectural":[88],"support":[89],"transactional":[91],"memory":[92],"TSX)":[95],"be":[97],"leveraged":[98],"a":[100,133,185],"highly":[101],"efficient":[102,116],"primitive":[104],"transient":[106,136],"execution.":[107],"Based":[108],"on":[109,126,163],"observation,":[111],"design":[113],"TMPlayer,":[114,129],"an":[115],"high-resolution":[118],"TSX-based":[119],"framework":[121],"enclave":[123,150],"victims.":[124],"Built":[125],"top":[127],"present":[131],"PowSpectre-":[132],"novel":[134],"replay-based":[135],"attack":[138],"using":[139,160],"software-based":[140],"(via":[144],"RAPL)":[145],"exfiltrate":[148,174],"secretive":[149],"accurately":[152],"in":[153,177,188],"speculative":[155],"domain.":[156],"We":[157,183],"evaluate":[158],"PowSpectre":[159,172],"case":[161],"studies":[162],"several":[164],"representative":[165],"SGX":[166,189],"binaries.":[167],"evaluation":[169],"shows":[170],"unintended":[175],"secrets":[176],"enclaves":[178],"with":[179,215],"very":[180],"high":[181],"accuracy.":[182],"perform":[184],"gadget":[186],"analysis":[187],"libraries":[190],"widely-existing":[193],"code":[194],"patterns":[195],"are":[197],"differentiable":[199],"PowSpectre.":[201],"work":[203],"highlights":[204],"need":[206],"to":[207],"synergistically":[208],"understand":[209],"impact":[211],"security":[214],"introduction":[217],"new":[219],"hardware":[220],"functionalities.":[221]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2}],"updated_date":"2026-08-06T08:24:18.245995","created_date":"2025-10-10T00:00:00"}
