{"id":"https://openalex.org/W4409095334","doi":"https://doi.org/10.1145/3722041.3723099","title":"CUDA, Woulda, Shoulda: Returning Exploits in a SASS-y World","display_name":"CUDA, Woulda, Shoulda: Returning Exploits in a SASS-y World","publication_year":2025,"publication_date":"2025-03-30","ids":{"openalex":"https://openalex.org/W4409095334","doi":"https://doi.org/10.1145/3722041.3723099"},"language":"en","primary_location":{"id":"doi:10.1145/3722041.3723099","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3722041.3723099","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3722041.3723099","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 18th European Workshop on Systems Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3722041.3723099","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5116880239","display_name":"Jonas Roels","orcid":"https://orcid.org/0009-0003-6510-4273"},"institutions":[{"id":"https://openalex.org/I99464096","display_name":"KU Leuven","ror":"https://ror.org/05f950310","country_code":"BE","type":"education","lineage":["https://openalex.org/I99464096"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Jonas Roels","raw_affiliation_strings":["DistriNet, KU Leuven, Ghent, Belgium"],"raw_orcid":"https://orcid.org/0009-0003-6510-4273","affiliations":[{"raw_affiliation_string":"DistriNet, KU Leuven, Ghent, Belgium","institution_ids":["https://openalex.org/I99464096"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113592874","display_name":"A. Jacobs","orcid":"https://orcid.org/0000-0002-9958-0273"},"institutions":[{"id":"https://openalex.org/I99464096","display_name":"KU Leuven","ror":"https://ror.org/05f950310","country_code":"BE","type":"education","lineage":["https://openalex.org/I99464096"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Adriaan Jacobs","raw_affiliation_strings":["DistriNet, KU Leuven, Ghent, Belgium"],"raw_orcid":"https://orcid.org/0000-0002-9958-0273","affiliations":[{"raw_affiliation_string":"DistriNet, KU Leuven, Ghent, Belgium","institution_ids":["https://openalex.org/I99464096"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5081376452","display_name":"Stijn Volckaert","orcid":"https://orcid.org/0000-0001-5594-7742"},"institutions":[{"id":"https://openalex.org/I99464096","display_name":"KU Leuven","ror":"https://ror.org/05f950310","country_code":"BE","type":"education","lineage":["https://openalex.org/I99464096"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Stijn Volckaert","raw_affiliation_strings":["DistriNet, KU Leuven, Ghent, Belgium"],"raw_orcid":"https://orcid.org/0000-0001-5594-7742","affiliations":[{"raw_affiliation_string":"DistriNet, KU Leuven, Ghent, Belgium","institution_ids":["https://openalex.org/I99464096"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I99464096"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"40","last_page":"48"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9861000180244446,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/sass","display_name":"Sass","score":0.9508769512176514},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7773703336715698},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6438146829605103},{"id":"https://openalex.org/keywords/cuda","display_name":"CUDA","score":0.5457422733306885},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.34965720772743225},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.21223124861717224},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.1524173617362976}],"concepts":[{"id":"https://openalex.org/C2778917941","wikidata":"https://www.wikidata.org/wiki/Q1572865","display_name":"Sass","level":2,"score":0.9508769512176514},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7773703336715698},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6438146829605103},{"id":"https://openalex.org/C2778119891","wikidata":"https://www.wikidata.org/wiki/Q477690","display_name":"CUDA","level":2,"score":0.5457422733306885},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.34965720772743225},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.21223124861717224},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.1524173617362976}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3722041.3723099","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3722041.3723099","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3722041.3723099","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 18th European Workshop on Systems Security","raw_type":"proceedings-article"},{"id":"pmh:oai:lirias2repo.kuleuven.be:20.500.12942/762565","is_oa":false,"landing_page_url":"https://lirias.kuleuven.be/handle/20.500.12942/762565","pdf_url":null,"source":{"id":"https://openalex.org/S7407055369","display_name":"Lirias","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"The 18th European Workshop on Systems Security, Rotterdam, The Netherlands, 30 March - 3 April 2025","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"doi:10.1145/3722041.3723099","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3722041.3723099","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3722041.3723099","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 18th European Workshop on Systems Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320322308","display_name":"KU Leuven","ror":"https://ror.org/05f950310"},{"id":"https://openalex.org/F4320327336","display_name":"Vlaamse regering","ror":null}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4409095334.pdf","grobid_xml":"https://content.openalex.org/works/W4409095334.grobid-xml"},"referenced_works_count":73,"referenced_works":["https://openalex.org/W44137157","https://openalex.org/W53119127","https://openalex.org/W1512154564","https://openalex.org/W1534651081","https://openalex.org/W1871471646","https://openalex.org/W1938355940","https://openalex.org/W1969338270","https://openalex.org/W1969501726","https://openalex.org/W1982829328","https://openalex.org/W2031641633","https://openalex.org/W2062340141","https://openalex.org/W2068034551","https://openalex.org/W2099382052","https://openalex.org/W2109219878","https://openalex.org/W2117798902","https://openalex.org/W2120432001","https://openalex.org/W2121468041","https://openalex.org/W2124360577","https://openalex.org/W2138517425","https://openalex.org/W2162800072","https://openalex.org/W2162986442","https://openalex.org/W2167728712","https://openalex.org/W2205902796","https://openalex.org/W2253913793","https://openalex.org/W2258876169","https://openalex.org/W2293825325","https://openalex.org/W2323777873","https://openalex.org/W2398071904","https://openalex.org/W2512784977","https://openalex.org/W2588337836","https://openalex.org/W2782087530","https://openalex.org/W2891810898","https://openalex.org/W2897058394","https://openalex.org/W2899759798","https://openalex.org/W2901854230","https://openalex.org/W2915982081","https://openalex.org/W2920798074","https://openalex.org/W2963200715","https://openalex.org/W2963735655","https://openalex.org/W2969364302","https://openalex.org/W2970971581","https://openalex.org/W2990138404","https://openalex.org/W3013478269","https://openalex.org/W3036001318","https://openalex.org/W3046853140","https://openalex.org/W3107299738","https://openalex.org/W3109934402","https://openalex.org/W3112502950","https://openalex.org/W3203911685","https://openalex.org/W4234208415","https://openalex.org/W4243908662","https://openalex.org/W4255785636","https://openalex.org/W4281854295","https://openalex.org/W4289038676","https://openalex.org/W4306406258","https://openalex.org/W4312735342","https://openalex.org/W4365806382","https://openalex.org/W4376167296","https://openalex.org/W4379537862","https://openalex.org/W4380881032","https://openalex.org/W4387042449","https://openalex.org/W4387064050","https://openalex.org/W4387542636","https://openalex.org/W4391420909","https://openalex.org/W4401752883","https://openalex.org/W4402274522","https://openalex.org/W4402288709","https://openalex.org/W4405786899","https://openalex.org/W4407568114","https://openalex.org/W6727610235","https://openalex.org/W6762948735","https://openalex.org/W6852923217","https://openalex.org/W7019288917"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W4249952298","https://openalex.org/W319799525","https://openalex.org/W2909216069","https://openalex.org/W17155033","https://openalex.org/W232486353","https://openalex.org/W2105452555","https://openalex.org/W4231335988"],"abstract_inverted_index":{"The":[0],"rising":[1],"popularity":[2],"of":[3,30,47,64,73,88],"Graphics":[4],"Processing":[5],"Units":[6],"(GPUs)":[7],"has":[8],"made":[9],"them":[10],"an":[11],"attractive":[12],"target":[13],"for":[14],"attackers":[15,122],"looking":[16],"to":[17,60,105,123],"steal":[18],"Intellectual":[19],"Property":[20],"(IP)":[21],"such":[22],"as":[23],"ML":[24],"models":[25],"or":[26],"disrupt":[27],"the":[28,44,61,65,70,83,116],"operation":[29],"heterogeneous":[31],"computing":[32],"systems.":[33],"However,":[34],"defending":[35],"against":[36],"GPU":[37],"attacks":[38,131],"is":[39,119],"anything":[40],"but":[41],"trivial":[42],"since":[43],"inner":[45],"workings":[46],"these-often":[48],"proprietary-devices":[49],"are":[50,134],"still":[51],"poorly":[52],"understood.":[53],"Preliminary":[54],"work":[55],"demonstrates":[56],"a":[57],"worrying":[58,79],"similarity":[59],"attack":[62,103],"surface":[63],"CPU":[66],"domain,":[67],"particularly":[68],"concerning":[69],"memory":[71],"unsafety":[72],"device-side":[74,94],"code.":[75,97],"We":[76,98,127],"corroborate":[77],"these":[78],"findings":[80],"by":[81],"constructing":[82],"first":[84],"rigorous":[85],"experimental":[86],"analysis":[87],"input-triggered,":[89],"ROP-based":[90],"exploits":[91],"entirely":[92],"within":[93],"NVIDIA":[95],"CUDA":[96],"repurposed":[99],"known":[100],"CPU-based":[101],"code-reuse":[102],"techniques":[104],"unlock":[106],"previously":[107,140],"unusable":[108],"gadgets":[109],"in":[110],"this":[111],"code":[112],"and":[113,136],"demonstrate":[114],"that":[115,129],"gadget":[117],"set":[118],"Turing-complete,":[120],"enabling":[121],"perform":[124],"arbitrary":[125],"computations.":[126],"conclude":[128],"ROP":[130],"on":[132],"GPUs":[133],"feasible":[135],"more":[137],"potent":[138],"than":[139],"thought.":[141]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}