{"id":"https://openalex.org/W4415308404","doi":"https://doi.org/10.1145/3725843.3756058","title":"One Flew over the Stack Engine\u2019s Nest: Practical Microarchitectural Attacks on the Stack Engine","display_name":"One Flew over the Stack Engine\u2019s Nest: Practical Microarchitectural Attacks on the Stack Engine","publication_year":2025,"publication_date":"2025-10-17","ids":{"openalex":"https://openalex.org/W4415308404","doi":"https://doi.org/10.1145/3725843.3756058"},"language":null,"primary_location":{"id":"doi:10.1145/3725843.3756058","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3725843.3756058","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3725843.3756058","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 58th IEEE/ACM International Symposium on Microarchitecture","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3725843.3756058","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5120047081","display_name":"Silvan Niederer","orcid":null},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Silvan Niederer","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":"https://orcid.org/0009-0009-2142-7728","affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120047082","display_name":"Sandro R\u00fcegge","orcid":null},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Sandro R\u00fcegge","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":"https://orcid.org/0009-0009-8004-740X","affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086840679","display_name":"Ali Hajiabadi","orcid":"https://orcid.org/0000-0002-3219-7544"},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Ali Hajiabadi","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":"https://orcid.org/0000-0002-3219-7544","affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5082033768","display_name":"Kaveh Razavi","orcid":"https://orcid.org/0000-0002-8588-7100"},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Kaveh Razavi","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":"https://orcid.org/0000-0002-8588-7100","affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I35440088"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.2522019,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"94","last_page":"110"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9803000092506409,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/stack","display_name":"Stack (abstract data type)","score":0.7109000086784363},{"id":"https://openalex.org/keywords/call-stack","display_name":"Call stack","score":0.3176000118255615},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.30809998512268066},{"id":"https://openalex.org/keywords/microarchitecture","display_name":"Microarchitecture","score":0.30239999294281006}],"concepts":[{"id":"https://openalex.org/C9395851","wikidata":"https://www.wikidata.org/wiki/Q177929","display_name":"Stack (abstract data type)","level":2,"score":0.7109000086784363},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5945000052452087},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.365200012922287},{"id":"https://openalex.org/C119024030","wikidata":"https://www.wikidata.org/wiki/Q759899","display_name":"Call stack","level":3,"score":0.3176000118255615},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.30809998512268066},{"id":"https://openalex.org/C107598950","wikidata":"https://www.wikidata.org/wiki/Q259864","display_name":"Microarchitecture","level":2,"score":0.30239999294281006},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.28110000491142273},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.24879999458789825},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.24210000038146973},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.23109999299049377}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3725843.3756058","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3725843.3756058","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3725843.3756058","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 58th IEEE/ACM International Symposium on Microarchitecture","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3725843.3756058","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3725843.3756058","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3725843.3756058","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 58th IEEE/ACM International Symposium on Microarchitecture","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G7502164075","display_name":null,"funder_award_id":"MB22.00057","funder_id":"https://openalex.org/F4320335238","funder_display_name":"Staatssekretariat f\u00fcr Bildung, Forschung und Innovation"}],"funders":[{"id":"https://openalex.org/F4320335238","display_name":"Staatssekretariat f\u00fcr Bildung, Forschung und Innovation","ror":"https://ror.org/01kw63t33"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4415308404.pdf","grobid_xml":"https://content.openalex.org/works/W4415308404.grobid-xml"},"referenced_works_count":31,"referenced_works":["https://openalex.org/W2137059427","https://openalex.org/W2147758029","https://openalex.org/W2791034507","https://openalex.org/W2795286232","https://openalex.org/W2903035991","https://openalex.org/W2963311060","https://openalex.org/W2979479406","https://openalex.org/W2983294834","https://openalex.org/W3007037833","https://openalex.org/W3097736620","https://openalex.org/W3190597741","https://openalex.org/W3197795418","https://openalex.org/W3207879247","https://openalex.org/W4226326147","https://openalex.org/W4238851087","https://openalex.org/W4242926647","https://openalex.org/W4308083752","https://openalex.org/W4380881061","https://openalex.org/W4385245129","https://openalex.org/W4385412176","https://openalex.org/W4388095409","https://openalex.org/W4389476379","https://openalex.org/W4393407237","https://openalex.org/W4393407242","https://openalex.org/W4395106389","https://openalex.org/W4403524650","https://openalex.org/W4404134127","https://openalex.org/W4408228828","https://openalex.org/W4408849037","https://openalex.org/W4411337367","https://openalex.org/W4411337826"],"related_works":[],"abstract_inverted_index":{"Security":[0,210],"research":[1],"on":[2,55,182],"modern":[3],"CPUs":[4,63,153,203],"has":[5],"raised":[6],"numerous":[7],"concerns":[8],"in":[9,34,121,201],"recent":[10,35,59,146],"years.These":[11],"security":[12,43],"issues":[13],"stem":[14],"from":[15,134],"classic":[16],"microarchitectural":[17],"optimizations":[18],"designed":[19],"decades":[20],"ago,":[21],"without":[22],"consideration":[23],"for":[24,64,197],"security.Stack":[25],"pointer":[26,90],"tracking,":[27],"also":[28,206],"known":[29],"as":[30,79,139],"the":[31,42,46,65,70,75,80,88,93,112,122,163,170,190,198],"stack":[32,47,76,89,113,164,171,199],"engine":[33,114,200],"CPUs,":[36],"is":[37],"one":[38],"such":[39,78],"optimization.To":[40],"investigate":[41],"implications":[44],"of":[45,58,74,124],"engine,":[48,77,172],"we":[49,97,173,205],"reverse":[50],"engineer":[51],"its":[52],"operational":[53],"details":[54],"a":[56,135],"number":[57],"Intel":[60],"and":[61,105,127,150,176,185,211,216],"AMD":[62,147],"first":[66],"time.Our":[67],"results":[68],"show":[69],"particular":[71],"microarchitecturedependent":[72],"behaviors":[73],"conditions":[81],"under":[82,115],"which":[83,158,204],"it":[84],"needs":[85],"to":[86,168,192],"synchronize":[87],"values":[91],"with":[92],"backend.Using":[94],"these":[95,119,166],"results,":[96],"build":[98],"three":[99],"primitives":[100,120],"called":[101],"Direct":[102],"Underflow,":[103],"Sync+Reload":[104],"Prime+Sync+Probe":[106],"that":[107,145],"enable":[108],"information":[109],"leakage":[110],"through":[111],"different":[116],"conditions.We":[117],"use":[118],"construction":[123],"various":[125],"covert":[126],"side-channel":[128],"attacks,":[129],"leaking":[130],"sensitive":[131],"patient":[132],"records":[133],"widely-used":[136],"JSON":[137],"library":[138],"an":[140],"example.Our":[141],"mitigation":[142],"efforts":[143],"reveal":[144],"Zen":[148,151,183,186],"4":[149,184],"5":[152],"include":[154],"undocumented":[155],"chicken":[156],"bits":[157,167],"allow":[159],"enabling":[160],"or":[161],"disabling":[162],"engine.Using":[165],"disable":[169],"measure":[174],"3.98%":[175],"3.94%":[177],"slowdown":[178],"using":[179],"SPEC":[180],"CPU2017":[181],"5,":[187],"respectively,":[188],"prompting":[189],"need":[191],"consider":[193],"more":[194],"secure":[195],"designs":[196],"future":[202],"discuss.":[207],"CCS":[208],"Concepts\u2022":[209],"privacy":[212],"\u2192":[213],"Side-channel":[214],"analysis":[215],"countermeasures.":[217]},"counts_by_year":[],"updated_date":"2026-07-31T08:31:51.225901","created_date":"2025-10-18T00:00:00"}