{"id":"https://openalex.org/W4415293402","doi":"https://doi.org/10.1145/3725843.3756029","title":"Understanding and Mitigating Covert Channel and Side Channel Vulnerabilities Introduced by RowHammer Defenses","display_name":"Understanding and Mitigating Covert Channel and Side Channel Vulnerabilities Introduced by RowHammer Defenses","publication_year":2025,"publication_date":"2025-10-17","ids":{"openalex":"https://openalex.org/W4415293402","doi":"https://doi.org/10.1145/3725843.3756029"},"language":null,"primary_location":{"id":"doi:10.1145/3725843.3756029","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3725843.3756029","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 58th IEEE/ACM International Symposium on Microarchitecture","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3725843.3756029","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5012402623","display_name":"F. Nisa Bostanc\u0131","orcid":"https://orcid.org/0000-0002-2718-0297"},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"F. Nisa Bostanc\u0131","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":"https://orcid.org/0000-0002-2718-0297","affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5095848493","display_name":"O\u011fuzhan Canpolat","orcid":null},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"O\u011fuzhan Canpolat","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":"https://orcid.org/0009-0007-6166-0781","affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056716458","display_name":"Ataberk Olgun","orcid":"https://orcid.org/0000-0001-5333-5726"},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Ataberk Olgun","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":"https://orcid.org/0000-0001-5333-5726","affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041744643","display_name":"\u0130smail Emir Y\u00fcksel","orcid":"https://orcid.org/0000-0003-3310-4423"},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Ismail Emir Y\u00fcksel","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":"https://orcid.org/0000-0003-3310-4423","affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103231567","display_name":"Konstantinos Kanellopoulos","orcid":"https://orcid.org/0000-0002-2375-7490"},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Konstantinos Kanellopoulos","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":"https://orcid.org/0000-0002-2375-7490","affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008240365","display_name":"Mohammad Sadrosadati","orcid":"https://orcid.org/0000-0002-4029-0175"},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Mohammad Sadrosadati","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":"https://orcid.org/0000-0002-4029-0175","affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001715701","display_name":"A. Giray Ya\u011fl\u0131k\u00e7\u0131","orcid":"https://orcid.org/0000-0002-9333-6077"},"institutions":[{"id":"https://openalex.org/I4210128801","display_name":"Helmholtz Center for Information Security","ror":"https://ror.org/02njgxr09","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I4210128801"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Abdullah Giray Ya\u011fl\u0131k\u00e7\u0131","raw_affiliation_strings":["ETH Zurich and CISPA, Saarbr\u00fccken, Germany"],"raw_orcid":"https://orcid.org/0000-0002-9333-6077","affiliations":[{"raw_affiliation_string":"ETH Zurich and CISPA, Saarbr\u00fccken, Germany","institution_ids":["https://openalex.org/I4210128801"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5050695684","display_name":"Onur Mutlu","orcid":"https://orcid.org/0000-0002-0075-2312"},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Onur Mutlu","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":"https://orcid.org/0000-0002-0075-2312","affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1412","last_page":"1432"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/side-channel-attack","display_name":"Side channel attack","score":0.7350000143051147},{"id":"https://openalex.org/keywords/channel","display_name":"Channel (broadcasting)","score":0.5942999720573425},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.36559998989105225},{"id":"https://openalex.org/keywords/covert","display_name":"Covert","score":0.36480000615119934},{"id":"https://openalex.org/keywords/covert-channel","display_name":"Covert channel","score":0.352400004863739},{"id":"https://openalex.org/keywords/countermeasure","display_name":"Countermeasure","score":0.32019999623298645}],"concepts":[{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.7350000143051147},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6222000122070312},{"id":"https://openalex.org/C127162648","wikidata":"https://www.wikidata.org/wiki/Q16858953","display_name":"Channel (broadcasting)","level":2,"score":0.5942999720573425},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5318999886512756},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.36559998989105225},{"id":"https://openalex.org/C2779338814","wikidata":"https://www.wikidata.org/wiki/Q5179285","display_name":"Covert","level":2,"score":0.36480000615119934},{"id":"https://openalex.org/C29024540","wikidata":"https://www.wikidata.org/wiki/Q1476964","display_name":"Covert channel","level":5,"score":0.352400004863739},{"id":"https://openalex.org/C21593369","wikidata":"https://www.wikidata.org/wiki/Q1032176","display_name":"Countermeasure","level":2,"score":0.32019999623298645},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3156999945640564},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.30649998784065247},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.3059999942779541},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.304500013589859},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.258899986743927},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.2547000050544739}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3725843.3756029","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3725843.3756029","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 58th IEEE/ACM International Symposium on Microarchitecture","raw_type":"proceedings-article"},{"id":"doi:10.60882/cispa.32780439","is_oa":true,"landing_page_url":"https://doi.org/10.60882/cispa.32780439","pdf_url":null,"source":{"id":"https://openalex.org/S7407050916","display_name":"CISPA Helmholtz Center","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"ConferenceProceeding"},{"id":"doi:10.60882/cispa.32780439.v1","is_oa":true,"landing_page_url":"https://doi.org/10.60882/cispa.32780439.v1","pdf_url":null,"source":{"id":"https://openalex.org/S7407050916","display_name":"CISPA Helmholtz Center","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"ConferenceProceeding"}],"best_oa_location":{"id":"doi:10.1145/3725843.3756029","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3725843.3756029","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 58th IEEE/ACM International Symposium on Microarchitecture","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G6265115643","display_name":null,"funder_award_id":"No.62472374","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":128,"referenced_works":["https://openalex.org/W1536696925","https://openalex.org/W1571203384","https://openalex.org/W1594031697","https://openalex.org/W1678356000","https://openalex.org/W1934458198","https://openalex.org/W1964858680","https://openalex.org/W1979866689","https://openalex.org/W1988790447","https://openalex.org/W2015827499","https://openalex.org/W2023834387","https://openalex.org/W2024109642","https://openalex.org/W2034861439","https://openalex.org/W2040870580","https://openalex.org/W2061354941","https://openalex.org/W2073899127","https://openalex.org/W2098040113","https://openalex.org/W2099280458","https://openalex.org/W2119821739","https://openalex.org/W2122111042","https://openalex.org/W2124237318","https://openalex.org/W2135965542","https://openalex.org/W2142875853","https://openalex.org/W2147657366","https://openalex.org/W2155524176","https://openalex.org/W2158319074","https://openalex.org/W2158620667","https://openalex.org/W2163563130","https://openalex.org/W2219635825","https://openalex.org/W2329308213","https://openalex.org/W2329976284","https://openalex.org/W2337480911","https://openalex.org/W2350778671","https://openalex.org/W2399542024","https://openalex.org/W2418958843","https://openalex.org/W2420049379","https://openalex.org/W2489077495","https://openalex.org/W2512093185","https://openalex.org/W2516668814","https://openalex.org/W2518205541","https://openalex.org/W2525431465","https://openalex.org/W2550432238","https://openalex.org/W2612454599","https://openalex.org/W2612687770","https://openalex.org/W2613970414","https://openalex.org/W2624299682","https://openalex.org/W2625267941","https://openalex.org/W2648282931","https://openalex.org/W2734814518","https://openalex.org/W2769824527","https://openalex.org/W2775990858","https://openalex.org/W2783301790","https://openalex.org/W2786858886","https://openalex.org/W2795139041","https://openalex.org/W2795222486","https://openalex.org/W2810883802","https://openalex.org/W2814895833","https://openalex.org/W2889929196","https://openalex.org/W2893163116","https://openalex.org/W2897639728","https://openalex.org/W2897830755","https://openalex.org/W2898694310","https://openalex.org/W2905808651","https://openalex.org/W2909501416","https://openalex.org/W2910622707","https://openalex.org/W2911964244","https://openalex.org/W2945145734","https://openalex.org/W2961531859","https://openalex.org/W2962654801","https://openalex.org/W2962726564","https://openalex.org/W2968534477","https://openalex.org/W2974891422","https://openalex.org/W2999916660","https://openalex.org/W3011243356","https://openalex.org/W3015367674","https://openalex.org/W3015685940","https://openalex.org/W3016266693","https://openalex.org/W3016511751","https://openalex.org/W3036003802","https://openalex.org/W3046609696","https://openalex.org/W3046859417","https://openalex.org/W3092001024","https://openalex.org/W3102933117","https://openalex.org/W3103367901","https://openalex.org/W3105648728","https://openalex.org/W3113714506","https://openalex.org/W3119608364","https://openalex.org/W3133752511","https://openalex.org/W3137500779","https://openalex.org/W3157763265","https://openalex.org/W3172496160","https://openalex.org/W3193730902","https://openalex.org/W3212205796","https://openalex.org/W3213793813","https://openalex.org/W4200023795","https://openalex.org/W4214481814","https://openalex.org/W4214757266","https://openalex.org/W4225307263","https://openalex.org/W4239813889","https://openalex.org/W4280584183","https://openalex.org/W4281712393","https://openalex.org/W4287849479","https://openalex.org/W4288057786","https://openalex.org/W4288057787","https://openalex.org/W4288057800","https://openalex.org/W4307880067","https://openalex.org/W4308083593","https://openalex.org/W4308083833","https://openalex.org/W4308083923","https://openalex.org/W4308084251","https://openalex.org/W4308644389","https://openalex.org/W4309137721","https://openalex.org/W4312381597","https://openalex.org/W4360831792","https://openalex.org/W4360831957","https://openalex.org/W4386075825","https://openalex.org/W4386965171","https://openalex.org/W4393591575","https://openalex.org/W4404954327","https://openalex.org/W4404955059","https://openalex.org/W4404955116","https://openalex.org/W4408893486","https://openalex.org/W4409248339","https://openalex.org/W4409248403","https://openalex.org/W4409248450","https://openalex.org/W4409248625","https://openalex.org/W4409248676","https://openalex.org/W4411233331","https://openalex.org/W4412346171"],"related_works":[],"abstract_inverted_index":{"DRAM":[0,20,29,156],"chips":[1],"are":[2],"increasingly":[3],"vulnerable":[4],"to":[5,28,40,78,144,163,206],"read":[6],"disturbance":[7],"phenomena":[8],"(e.g.,":[9,63,130],"RowHammer":[10,35,50,84,99,121,126,146,201,228],"and":[11,65,72,95,108,114,212,232,237,264,275,289,295,303],"RowPress),":[12],"where":[13],"repeatedly":[14],"accessing":[15],"or":[16],"keeping":[17],"open":[18],"a":[19,193,245],"row":[21],"causes":[22],"bitflips":[23,36],"in":[24,37,167,283,307],"nearby":[25],"rows,":[26],"due":[27],"density":[30],"scaling.":[31],"Attackers":[32],"can":[33,175,251,293],"exploit":[34,145],"real":[38],"systems":[39,306],"compromise":[41],"security,":[42],"which":[43],"has":[44],"motivated":[45],"many":[46],"prior":[47,88],"works":[48],"on":[49,185,256,299],"defenses.":[51,85,122],"To":[52],"enable":[53,294],"such":[54,311],"defenses,":[55],"recent":[56],"DDR":[57],"specifications":[58],"introduce":[59,191],"new":[60,194,312],"defense":[61],"frameworks":[62],"PRAC":[64,231],"RFM).":[66],"For":[67],"robust":[68,305],"(i.e.,":[69,230],"secure,":[70],"safe,":[71],"reliable)":[73],"operation,":[74],"it":[75],"is":[76],"critical":[77],"analyze":[79],"security":[80],"implications":[81],"of":[82,110,196,310],"widely-adopted":[83],"Yet,":[86],"no":[87],"work":[89,292,298],"analyzes":[90],"the":[91,105,200,257,308],"timing":[92,111,149],"covert":[93,112,222],"channel":[94,97,113,116,223,240],"side":[96,115],"vulnerabilities":[98,117],"defenses":[100,147,229],"introduce.":[101],"This":[102],"paper":[103],"presents":[104],"first":[106],"analysis":[107],"evaluation":[109],"introduced":[118],"by":[119],"state-of-the-art":[120,227],"We":[123,190,262,287],"demonstrate":[124,244],"that":[125,140,198,250,273],"defenses\u2019":[127],"preventive":[128,152,178,181],"actions":[129,153,179,182,259],"preventively":[131],"refreshing":[132],"potential":[133],"victim":[134,216],"rows)":[135],"have":[136],"two":[137,221,226],"fundamental":[138],"features":[139],"allow":[141],"an":[142],"attacker":[143],"for":[148],"leakage.":[150],"First,":[151,218],"often":[154],"reduce":[155],"bandwidth":[157],"availability":[158],"because":[159,180],"they":[160,260],"block":[161],"access":[162,171,188],"DRAM,":[164],"thereby":[165],"resulting":[166],"significantly":[168],"longer":[169],"memory":[170,187,203],"latencies.":[172],"Second,":[173,242],"users":[174],"intentionally":[176],"trigger":[177],"highly":[183,284],"depend":[184],"application":[186],"patterns.":[189],"LeakyHammer,":[192],"class":[195],"attacks":[197,224],"leverage":[199],"defense-induced":[202],"latency":[204],"differences":[205],"establish":[207],"communication":[208],"channels":[209],"between":[210],"processes":[211],"leak":[213],"secrets":[214],"from":[215],"processes.":[217],"we":[219,243],"build":[220],"exploiting":[225],"RFM),":[233],"achieving":[234],"39.0":[235],"Kbps":[236,239],"48.7":[238],"capacity.":[241],"proof-of-concept":[246],"website":[247],"fingerprinting":[248],"attack":[249],"identify":[252],"visited":[253],"websites":[254],"based":[255],"RowHammer-preventive":[258],"cause.":[261],"propose":[263],"evaluate":[265],"three":[266],"countermeasures":[267],"against":[268],"LeakyHammer.":[269],"Our":[270],"results":[271],"show":[272],"fundamentally":[274],"completely":[276],"mitigating":[277],"LeakyHammer":[278],"induces":[279],"large":[280],"performance":[281],"overheads":[282],"RowHammer-vulnerable":[285],"systems.":[286],"believe":[288],"hope":[290],"our":[291],"aid":[296],"future":[297],"designing":[300],"better":[301],"solutions":[302],"more":[304],"presence":[309],"vulnerabilities.":[313]},"counts_by_year":[{"year":2026,"cited_by_count":3}],"updated_date":"2026-07-17T09:13:05.818461","created_date":"2025-10-18T00:00:00"}