[235] Adrian TANG, Simha SETHUMADHAVAN et Salvatore STOLFO. « CLKSCREW : Exposing the Perils of Security-Oblivious Energy Management ». In : USENIX Security 17. 2017 (pages 43, 66).

[236] Pengfei QIU, Dongsheng WANG, Yongqiang LYU et Gang QU. « VoltJockey : Breaching TrustZone by Software-Controlled Voltage Manipulation over Multi-Core Frequencies ». In : Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security. CCS '19. London, United Kingdom : Association for Computing Machinery, 2019, p. 195-209. ISBN : 9781450367479. DOI : 10.1145/3319535.3354201. URL : https://doi.org/10.1145/3319535.3354201 (pages 43, 66).

[237] Pengfei QIU, Dongsheng WANG, Yongqiang LYU et Gang QU. « VoltJockey : Breaching SGX by Software-Controlled Voltage-Induced Hardware Faults ». In : Asian Hardware Oriented Security and Trust Symposium, AsianHOST 2019, Xi'an, China, December 16-17, 2019. IEEE, 2019, p. 1-6. DOI : 10.1109/AsianHOST47458.2019.9006701. URL : https://doi.org/10.1109/AsianHOST47458.2019.9006701 (page 43).

[238] Kit MURDOCK, David OSWALD, Flavio D. GARCIA, Jo VAN BULCK, Daniel GRUSS et Frank PIESSENS. « Plundervolt : Software-based Fault Injection Attacks against Intel SGX ». In : 41st IEEE Symposium on Security and Privacy (S&P'20). 2020 (pages 43, 66).

[239] Zijo KENJAR, Tommaso FRASSETTO, David GENS, Michael FRANZ et Ahmad-Reza SADEGHI. « V0LTpwn : Attacking x86 Processor Integrity from Software ». In : 29th USENIX Security Symposium (USENIX Security 20). USENIX Association, août 2020, p. 1445-1461. ISBN : 978-1-939133-17-5. URL : https://www.usenix.org/conference/usenixsecurity20/presentation/kenjar (pages 44, 66).

[240] Yoongu KIM, Ross DALY, Jeremie KIM, Chris FALLIN, Ji Hye LEE, Donghyuk LEE, Chris WILKERSON, Konrad LAI et Onur MUTLU. « Flipping Bits in Memory without Accessing Them : An Experimental Study of DRAM Disturbance Errors ». In : Proceeding of the 41st Annual International Symposium on Computer Architecture. ISCA '14. Minneapolis, Minnesota, USA : IEEE Press, 2014, p. 361-372. ISBN : 9781479943944 (page 44).

[241] Mark SEABORN et Thomas DULLIEN. Project Zero : Exploiting the DRAM rowhammer bug to gain kernel privileges. Google. 2015. URL : https://googleprojectzero.blogspot.com/2015/03/exploiting-dram-rowhammer-bug-to-gain.html (page 44).

[242] Daniel GRUSS, Clémentine MAURICE et Stefan MANGARD. « Rowhammer.js : A Remote Software-Induced Fault Attack in JavaScript ». In : DIMVA '16. 2016 (page 44).

[243] E. BOSMAN, K. RAZAVI, H. BOS et C. GIUFFRIDA. « Dedup Est Machina : Memory Deduplication as an Advanced Exploitation Vector ». In : 2016 IEEE Symposium on Security and Privacy (SP). 2016, p. 987-1004. DOI : 10.1109/SP.2016.63 (page 44).

[244] Kaveh RAZAVI, Ben GRAS, Erik BOSMAN, Bart PRENEEL, Cristiano GIUFFRIDA et Herbert BOS. « Flip Feng Shui : Hammering a Needle in the Software Stack ». In : USENIX Security. Pwnie Award Nomination for Best Cryptographic Attack. Août 2016. URL : Paper=https://download.vusec.net/papers/flip-feng-shui_sec16.pdf%20Slides=https://vusec.net/wp-content/uploads/2016/
06/presentation.pdf%20Web=https://www.vusec.net/projects/flip-feng-shui%20Press=https://goo.gl/owOb2m (page 44).

[245] Yuan XIAO, Xiaokuan ZHANG, Yinqian ZHANG et Radu TEODORESCU. « One Bit Flips, One Cloud Flops : Cross-VM Row Hammer Attacks and Privilege Escalation ». In : 25th USENIX Security Symposium (USENIX Security 16) . Austin, TX : USENIX Association, août 2016, p. 19-35. ISBN : 978-1-931971-32-4. URL : https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/xiao (page 44).

[246] Victor van der VEEN, Yanick FRATANTONIO, Martina LINDORFER, Daniel GRUSS, Clementine MAURICE, Giovanni VIGNA, Herbert BOS, Kaveh RAZAVI et Cristiano GIUFFRIDA. « Drammer : Deterministic Rowhammer Attacks on Mobile Platforms ». In : CCS. Pwnie Award for Best Privilege Escalation Bug, Android Security Reward, CSAW Best Paper Award, DCSR Paper Award. Oct. 2016. URL : Paper=https://vvdveen.com/publications/drammer.pdf%20Web=https://www.vusec.net/projects/drammer%20Code=https://github.com/vusec/drammer%20Press=https://goo.gl/y0lZ3l (page 44).

[247] D. GRUSS, M. LIPP, M. SCHWARZ, D. GENKIN, J. JUFFINGER, S. O'CONNELL, W. SCHOECHL et Y. YAROM. « Another Flip in the Wall of Rowhammer Defenses ». In : 2018 IEEE Symposium on Security and Privacy (SP) . 2018, p. 245-261. DOI : 10.1109/SP.2018.00031 (page 45).

[248] L. COJOCAR, J. KIM, M. PATEL, L. TSAI, S. SAROIU, A. WOLMAN et O. MUTLU. « Are We Susceptible to Rowhammer? An End-to-End Methodology for Cloud Providers ». In : 2020 IEEE Symposium on Security and Privacy (SP) . Los Alamitos, CA, USA : IEEE Computer Society, mai 2020, p. 712-728. DOI : 10.1109/SP40000.2020.00085. URL : https://doi.ieeecomputersociety.org/10.1109/SP40000.2020.00085 (page 45).

[249] A. KWONG, D. GENKIN, D. GRUSS et Y. YAROM. « RAMBleed : Reading Bits in Memory Without Accessing Them ». In : 2020 IEEE Symposium on Secu- rity and Privacy (SP) . Los Alamitos, CA, USA : IEEE Computer Society, mai 2020, p. 695-711. DOI : 10.1109/SP40000.2020.00020. URL : https://doi.ieeecomputersociety.org/10.1109/SP40000.2020.00020 (page 45).

[250] Nico WEICHBRODT, Anil KURMUS, Peter PIETZUCH et Rüdiger KAPITZA. « AsyncShock : Exploiting Synchronisation Bugs in Intel SGX Enclaves ». In : Computer Security – ESORICS 2016 . Sous la dir. d'Ioannis ASKOXYLAKIS, Sotiris IOANNIDIS, Sokratis KATSIKAS et Catherine MEADOWS. Cham : Springer International Publishing, 2016, p. 440-457 (page 45).

[251] Jaehyuk LEE, Jinsoo JANG, Yeongjin JANG, Nohyun KWAK, Yeseul CHOI, Changho CHOI, Taesoo KIM, Marcus PEINADO et Brent ByungHoon KANG. « Hacking in Darkness : Return-oriented Programming against Secure Enclaves ». In : 26th USENIX Security Symposium (USENIX Security 17) . Vancouver, BC : USENIX Association, août 2017, p. 523-539. ISBN : 978-1-931971-40-9. URL : https://www.usenix.org/conference/usenixsecurity17/technical-sessions/presentation/lee-jaehyuk (page 46).

[252] Andrea BIONDO, Mauro CONTI, Lucas DAVI, Tommaso FRASSETTO et Ahmad-Reza SADEGHI. « The Guard's Dilemma : Efficient Code-Reuse Attacks Against Intel SGX ». In : 27th USENIX Security Symposium (USENIX Security 18) . Baltimore, MD : USENIX Association, août 2018, p. 1213-1227. ISBN : 978-1-
06/presentation.pdf%20Web=https://www.vusec.net/projects/flip-feng-shui%20Press=https://goo.gl/owOb2m (page 44).

[245] Yuan XIAO, Xiaokuan ZHANG, Yinqian ZHANG et Radu TEODORESCU. « One Bit Flips, One Cloud Flops : Cross-VM Row Hammer Attacks and Privilege Escalation ». In : 25th USENIX Security Symposium (USENIX Security 16) . Austin, TX : USENIX Association, août 2016, p. 19-35. ISBN : 978-1-931971-32-4. URL : https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/xiao (page 44).

[246] Victor van der VEEN, Yanick FRATANTONIO, Martina LINDORFER, Daniel GRUSS, Clementine MAURICE, Giovanni VIGNA, Herbert BOS, Kaveh RAZAVI et Cristiano GIUFFRIDA. « Drammer : Deterministic Rowhammer Attacks on Mobile Platforms ». In : CCS. Pwnie Award for Best Privilege Escalation Bug, Android Security Reward, CSAW Best Paper Award, DCSR Paper Award. Oct. 2016. URL : Paper=https://vvdveen.com/publications/drammer.pdf%20Web=https://www.vusec.net/projects/drammer%20Code=https://github.com/vusec/drammer%20Press=https://goo.gl/y0lZ3l (page 44).

[247] D. GRUSS, M. LIPP, M. SCHWARZ, D. GENKIN, J. JUFFINGER, S. O'CONNELL, W. SCHOECHL et Y. YAROM. « Another Flip in the Wall of Rowhammer Defenses ». In : 2018 IEEE Symposium on Security and Privacy (SP) . 2018, p. 245-261. DOI : 10.1109/SP.2018.00031 (page 45).

[248] L. COJOCAR, J. KIM, M. PATEL, L. TSAI, S. SAROIU, A. WOLMAN et O. MUTLU. « Are We Susceptible to Rowhammer? An End-to-End Methodology for Cloud Providers ». In : 2020 IEEE Symposium on Security and Privacy (SP) . Los Alamitos, CA, USA : IEEE Computer Society, mai 2020, p. 712-728. DOI : 10.1109/SP40000.2020.00085. URL : https://doi.ieeecomputersociety.org/10.1109/SP40000.2020.00085 (page 45).

[249] A. KWONG, D. GENKIN, D. GRUSS et Y. YAROM. « RAMBleed : Reading Bits in Memory Without Accessing Them ». In : 2020 IEEE Symposium on Security and Privacy (SP) . Los Alamitos, CA, USA : IEEE Computer Society, mai 2020, p. 695-711. DOI : 10.1109/SP40000.2020.00020. URL : https://doi.ieeecomputersociety.org/10.1109/SP40000.2020.00020 (page 45).

[250] Nico WEICHBRODT, Anil KURMUS, Peter PIETZUCH et Rüdiger KAPITZA. « AsyncShock : Exploiting Synchronisation Bugs in Intel SGX Enclaves ». In : Computer Security – ESORICS 2016 . Sous la dir. d'Ioannis ASKOXYLAKIS, Sotiris IOANNIDIS, Sokratis KATSIKAS et Catherine MEADOWS. Cham : Springer International Publishing, 2016, p. 440-457 (page 45).

[251] Jaehyuk LEE, Jinsoo JANG, Yeongjin JANG, Nohyun KWAK, Yeseul CHOI, Changho CHOI, Taesoo KIM, Marcus PEINADO et Brent ByungHoon KANG. « Hacking in Darkness : Return-oriented Programming against Secure Enclaves ». In : 26th USENIX Security Symposium (USENIX Security 17) . Vancouver, BC : USENIX Association, août 2017, p. 523-539. ISBN : 978-1-931971-40-9. URL : https://www.usenix.org/conference/usenixsecurity17/technical-sessions/presentation/lee-jaehyuk (page 46).

[252] Andrea BIONDO, Mauro CONTI, Lucas DAVI, Tommaso FRASSETTO et Ahmad-Reza SADEGHI. « The Guard's Dilemma : Efficient Code-Reuse Attacks Against Intel SGX ». In : 27th USENIX Security Symposium (USENIX Security 18) . Baltimore, MD : USENIX Association, août 2018, p. 1213-1227. ISBN : 978-1-
939133-04-5. URL: https://www.usenix.org/conference/usenixsecurity18/presentation/biondo (page 46).

[253] Tobias CLOOSTERS, Michael RODLER et Lucas DAVI. « TeeRex : Discovery and Exploitation of Memory Corruption Vulnerabilities in SGX Enclaves ». In : 29th USENIX Security Symposium (USENIX Security 20). USENIX Association, août 2020, p. 841-858. ISBN : 978-1-939133-17-5. URL : https://www.usenix.org/conference/usenixsecurity20/presentation/cloosters (page 46).

[254] Jo VAN BULCK, David OSWALD, Eduard MARIN, Abdulla ALDOSERI, Flavio D. GARCIA et Frank PIESSENS. « A Tale of Two Worlds : Assessing the Vulnerability of Enclave Shielding Runtimes ». In : Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security. CCS '19. London, United Kingdom : Association for Computing Machinery, 2019, p. 1741-1758. ISBN : 9781450367479. DOI : 10.1145/3319535.3363206. URL : https://doi.org/10.1145/3319535.3363206 (pages 46, 67).

[255] Aravind MACHIRY, Eric GUSTAFSON, Chad SPENSKY, Christopher SALLS, Nick STEPHENS, Ruoyu WANG, Antonio BIANCHI, Yung Ryn CHOE, Christopher KRUEGEL et Giovanni VIGNA. « BOOMERANG : Exploiting the Semantic Gap in Trusted Execution Environments ». In : Proceedings of the Network and Distributed System Security Symposium. 2017 (page 46).

[256] Darius SUCIU, Stephen MCLAUGHLIN, Laurent SIMON et Radu SION. « Horizontal Privilege Escalation in Trusted Applications ». In : 29th USENIX Security Symposium (USENIX Security 20). USENIX Association, août 2020. URL : https://www.usenix.org/conference/usenixsecurity20/presentation/suciu (page 46).

[257] Di SHEN. Defeating Samsung KNOX with zero privilege. URL : https://www.blackhat.com/docs/us-17/thursday/us-17-Shen-Defeating-Samsung-KNOX-With-Zero-Privilege-wp.pdf (page 46).

[258] Breaking Samsung's ARM Trustzone. Quarkslab, 2019. URL : https://i.blackhat.com/USA-19/Thursday/us-19-Peterlin-Breaking-Samsungs-ARM-TrustZone.pdf (page 47).

[259] Jie WANG, Kun SUN, Lingguang LEI, Shengye WAN, Yuewu WANG et Jiwu JING. « Cache-in-the-Middle (CITM) Attacks : Manipulating Sensitive Data in Isolated Execution Environments ». In : Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security. CCS '20. Virtual Event, USA : Association for Computing Machinery, 2020, p. 1001-1015. ISBN : 9781450370899. DOI : 10.1145/3372297.3417886. URL : https://doi.org/10.1145/3372297.3417886 (page 47).

[260] Yuanzhong XU, Weidong CUI et Marcus PEINADO. « Controlled-Channel Attacks : Deterministic Side Channels for Untrusted Operating Systems ». In : Proceedings of the 2015 IEEE Symposium on Security and Privacy. SP '15. USA : IEEE Computer Society, 2015, p. 640-656. ISBN : 9781467369497. DOI : 10.1109/SP.2015.45. URL : https://doi.org/10.1109/SP.2015.45 (page 47).

[261] Ahmad MOGHIMI, Gorka IRAZOQUI et Thomas EISENBARTH. « CacheZoom : How SGX Amplifies The Power of Cache Attacks ». In : CoRR abs/1703.06986 (2017). arXiv : 1703.06986. URL : http://arxiv.org/abs/1703.06986 (page 47).

[262] Jo Van BULCK, Nico WEICHBRODT, Rüdiger KAPITZA, Frank PIESSENS et Raoul STRACKX. « Telling Your Secrets without Page Faults : Stealthy Page Table-Based Attacks on Enclaved Execution ». In : 26th USENIX Security Symposium (USENIX Security 2017). USENIX Association, août 2017, p. 1-11. ISBN : 978-1-939133-17-6. URL : https://doi.org/10.1145/339133-17-6 (page 46).
939133-04-5. URL: https://www.usenix.org/conference/usenixsecurity18/presentation/biondo (page 46).

[253] Tobias CLOOSTERS, Michael RODLER et Lucas DAVI. « TeeRex : Discovery and Exploitation of Memory Corruption Vulnerabilities in SGX Enclaves ». In : 29th USENIX Security Symposium (USENIX Security 20). USENIX Association, août 2020, p. 841-858. ISBN : 978-1-939133-17-5. URL : https://www.usenix.org/conference/usenixsecurity20/presentation/cloosters (page 46).

[254] Jo VAN BULCK, David OSWALD, Eduard MARIN, Abdulla ALDOSERI, Flavio D. GARCIA et Frank PIESSENS. « A Tale of Two Worlds : Assessing the Vulnerability of Enclave Shielding Runtimes ». In : Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security. CCS '19. London, United Kingdom : Association for Computing Machinery, 2019, p. 1741-1758. ISBN : 9781450367479. DOI : 10.1145/3319535.3363206. URL : https://doi.org/10.1145/3319535.3363206 (pages 46, 67).

[255] Aravind MACHIRY, Eric GUSTAFSON, Chad SPENSKY, Christopher SALLS, Nick STEPHENS, Ruoyu WANG, Antonio BIANCHI, Yung Ryn CHOE, Christopher KRUEGEL et Giovanni VIGNA. « BOOMERANG : Exploiting the Semantic Gap in Trusted Execution Environments ». In : Proceedings of the Network and Distributed System Security Symposium. 2017 (page 46).

[256] Darius SUCIU, Stephen MCLAUGHLIN, Laurent SIMON et Radu SION. « Horizontal Privilege Escalation in Trusted Applications ». In : 29th USENIX Security Symposium (USENIX Security 20). USENIX Association, août 2020. URL : https://www.usenix.org/conference/usenixsecurity20/presentation/suciu (page 46).

[257] Di SHEN. Defeating Samsung KNOX with zero privilege. URL : https://www.blackhat.com/docs/us-17/thursday/us-17-Shen-Defeating-Samsung-KNOX-With-Zero-Privilege-wp.pdf (page 46).

[258] Breaking Samsung's ARM Trustzone. Quarkslab, 2019. URL : https://i.blackhat.com/USA-19/Thursday/us-19-Peterlin-Breaking-Samsungs-ARM-TrustZone.pdf (page 47).

[259] Jie WANG, Kun SUN, Lingguang LEI, Shengye WAN, Yuewu WANG et Jiwu JING. « Cache-in-the-Middle (CITM) Attacks : Manipulating Sensitive Data in Isolated Execution Environments ». In : Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security. CCS '20. Virtual Event, USA : Association for Computing Machinery, 2020, p. 1001-1015. ISBN : 9781450370899. DOI : 10.1145/3372297.3417886. URL : https://doi.org/10.1145/3372297.3417886 (page 47).

[260] Yuanzhong XU, Weidong CUI et Marcus PEINADO. « Controlled-Channel Attacks : Deterministic Side Channels for Untrusted Operating Systems ». In : Proceedings of the 2015 IEEE Symposium on Security and Privacy. SP '15. USA : IEEE Computer Society, 2015, p. 640-656. ISBN : 9781467369497. DOI : 10.1109/SP.2015.45. URL : https://doi.org/10.1109/SP.2015.45 (page 47).

[261] Ahmad MOGHIMI, Gorka IRAZOQUI et Thomas EISENBARTH. « CacheZoom : How SGX Amplifies The Power of Cache Attacks ». In : CoRR abs/1703.06986 (2017). arXiv : 1703.06986. URL : http://arxiv.org/abs/1703.06986 (page 47).

[262] Jo Van BULCK, Nico WEICHBRODT, Rüdiger KAPITZA, Frank PIESSENS et Raoul STRACKX. « Telling Your Secrets without Page Faults : Stealthy Page Table-Based Attacks on Enclaved Execution ». In : 26th USENIX Security Symposium (USENIX Security 20). USENIX Association, août 2020, p. 841-858. ISBN : 978-1-939133-17-5. URL : https://www.usenix.org/conference/usenixsecurity20/presentation/cloosters (page 46).
*NIX Security 17*). Vancouver, BC : USENIX Association, août 2017, p. 1041-1056. ISBN : 978-1-931971-40-9. URL : https://www.usenix.org/conference/usenixsecurity17/technical-sessions/presentation/van-bulck (page 47).

[263] Wenhao WANG, Guoxing CHEN, Xiaorui PAN, Yinqian ZHANG, XiaoFeng WANG, Vincent BINDSCHAEDLER, Haixu TANG et Carl A. GUNTER. « Leaky Cauldron on the Dark Land : Understanding Memory Side-Channel Hazards in SGX ». In : *Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security*. CCS '17. Dallas, Texas, USA : Association for Computing Machinery, 2017, p. 2421-2434. ISBN : 9781450349468. DOI : 10.1145/3133956.3134038. URL : https://doi.org/10.1145/3133956.3134038 (page 47).

[264] Daniel MOGHIMI, Jo Van BULCK, Nadia HENINGER, Frank PIESSENS et Berk SUNAR. « CopyCat : Controlled Instruction-Level Attacks on Enclaves ». In : *29th USENIX Security Symposium (USENIX Security 20)*. USENIX Association, août 2020, p. 469-486. ISBN : 978-1-939133-17-5. URL : https://www.usenix.org/conference/usenixsecurity20/presentation/moghimi-copycat (page 47).

[265] Sangho LEE, Ming-Wei SHIH, Prasun GERA, Taesoo KIM, Hyesoon KIM et Marcus PEINADO. « Inferring Fine-grained Control Flow Inside SGX Enclaves with Branch Shadowing ». In : *26th USENIX Security Symposium (USENIX Security 17)*. Vancouver, BC : USENIX Association, août 2017, p. 557-574. ISBN : 978-1-931971-40-9. URL : https://www.usenix.org/conference/usenixsecurity17/technical-sessions/presentation/lee-sangho (page 48).

[266] Jo VAN BULCK, Frank PIESSENS et Raoul STRACKX. « Nemesis : Studying Microarchitectural Timing Leaks in Rudimentary CPU Interrupt Logic ». In : *Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security*. CCS '18. Toronto, Canada : Association for Computing Machinery, 2018, p. 178-195. ISBN : 9781450356930. DOI : 10.1145/3243734.3243822. URL : https://doi.org/10.1145/3243734.3243822 (page 48).

[267] Wubing WANG, Yinqian ZHANG et Zhiqiang LIN. « Time and Order : Towards Automatically Identifying Side-Channel Vulnerabilities in Enclave Binaries ». In : *22nd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2019)*. Chaoyang District, Beijing : USENIX Association, sept. 2019, p. 443-457. ISBN : 978-1-939133-07-6. URL : https://www.usenix.org/conference/raid2019/presentation/wang-wubing (page 48).

[268] Jo Van BULCK, Marina MINKIN, Ofir WEISSE, Daniel GENKIN, Baris KASIKCI, Frank PIESSENS, Mark SILBERSTEIN, Thomas F. WENISCH, Yuval YAROM et Raoul STRACKX. « Foreshadow : Extracting the Keys to the Intel SGX Kingdom with Transient Out-of-Order Execution ». In : *27th USENIX Security Symposium (USENIX Security 18)*. Baltimore, MD : USENIX Association, août 2018, 991-1008. ISBN : 978-1-939133-04-5. URL : https://www.usenix.org/conference/usenixsecurity18/presentation/bulck (page 48).

[269] G. CHEN, S. CHEN, Y. XIAO, Y. ZHANG, Z. LIN et T. H. LAI. « SgxPectre : Stealing Intel Secrets from SGX Enclaves Via Speculative Execution ». In : *2019 IEEE European Symposium on Security and Privacy (EuroS&P)*. 2019, p. 142-157. DOI : 10.1109/EuroSP.2019.00020 (page 48).

[270] Ben LAPID et Avishai WOOL. « Navigating the Samsung TrustZone and Cache-Attacks on the Keymaster Trustlet ». In : *Computer Security*. Sous la dir. de Javier LOPEZ, Jianying ZHOU et Miguel SORIANO. Cham : Springer International Publishing, 2018, p. 175-196. ISBN : 978-3-319-99073-6 (page 48).
*NIX Security 17*). Vancouver, BC : USENIX Association, août 2017, p. 1041-1056. ISBN : 978-1-931971-40-9. URL : https://www.usenix.org/conference/usenixsecurity17/technical-sessions/presentation/van-bulck (page 47).

[263] Wenhao WANG, Guoxing CHEN, Xiaorui PAN, Yinqian ZHANG, XiaoFeng WANG, Vincent BINDSCHAEDLER, Haixu TANG et Carl A. GUNTER. « Leaky Cauldron on the Dark Land : Understanding Memory Side-Channel Hazards in SGX ». In : *Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security*. CCS '17. Dallas, Texas, USA : Association for Computing Machinery, 2017, p. 2421-2434. ISBN : 9781450349468. DOI : 10.1145/3133956.3134038. URL : https://doi.org/10.1145/3133956.3134038 (page 47).

[264] Daniel MOGHIMI, Jo Van BULCK, Nadia HENINGER, Frank PIESSENS et Berk SUNAR. « CopyCat : Controlled Instruction-Level Attacks on Enclaves ». In : *29th USENIX Security Symposium (USENIX Security 20)*. USENIX Association, août 2020, p. 469-486. ISBN : 978-1-939133-17-5. URL : https://www.usenix.org/conference/usenixsecurity20/presentation/moghimi-copycat (page 47).

[265] Sangho LEE, Ming-Wei SHIH, Prasun GERA, Taesoo KIM, Hyesoon KIM et Marcus PEINADO. « Inferring Fine-grained Control Flow Inside SGX Enclaves with Branch Shadowing ». In : *26th USENIX Security Symposium (USENIX Security 17)*. Vancouver, BC : USENIX Association, août 2017, p. 557-574. ISBN : 978-1-931971-40-9. URL : https://www.usenix.org/conference/usenixsecurity17/technical-sessions/presentation/lee-sangho (page 48).

[266] Jo VAN BULCK, Frank PIESSENS et Raoul STRACKX. « Nemesis : Studying Microarchitectural Timing Leaks in Rudimentary CPU Interrupt Logic ». In : *Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security*. CCS '18. Toronto, Canada : Association for Computing Machinery, 2018, p. 178-195. ISBN : 9781450356930. DOI : 10.1145/3243734.3243822. URL : https://doi.org/10.1145/3243734.3243822 (page 48).

[267] Wubing WANG, Yinqian ZHANG et Zhiqiang LIN. « Time and Order : Towards Automatically Identifying Side-Channel Vulnerabilities in Enclave Binaries ». In : *22nd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2019)*. Chaoyang District, Beijing : USENIX Association, sept. 2019, p. 443-457. ISBN : 978-1-939133-07-6. URL : https://www.usenix.org/conference/raid2019/presentation/wang-wubing (page 48).

[268] Jo Van BULCK, Marina MINKIN, Ofir WEISSE, Daniel GENKIN, Baris KASIKCI, Frank PIESSENS, Mark SILBERSTEIN, Thomas F. WENISCH, Yuval YAROM et Raoul STRACKX. « Foreshadow : Extracting the Keys to the Intel SGX Kingdom with Transient Out-of-Order Execution ». In : *27th USENIX Security Symposium (USENIX Security 18)*. Baltimore, MD : USENIX Association, août 2018, 991-1008. ISBN : 978-1-939133-04-5. URL : https://www.usenix.org/conference/usenixsecurity18/presentation/bulck (page 48).

[269] G. CHEN, S. CHEN, Y. XIAO, Y. ZHANG, Z. LIN et T. H. LAI. « SgxPectre : Stealing Intel Secrets from SGX Enclaves Via Speculative Execution ». In : *2019 IEEE European Symposium on Security and Privacy (EuroS&P)*. 2019, p. 142-157. DOI : 10.1109/EuroSP.2019.00020 (page 48).

[270] Ben LAPID et Avishai WOOL. « Navigating the Samsung TrustZone and Cache-Attacks on the Keymaster Trustlet ». In : *Computer Security*. Sous la dir. de Javier LOPEZ, Jianying ZHOU et Miguel SORIANO. Cham : Springer International Publishing, 2018, p. 175-196. ISBN : 978-3-319-99073-6 (page 48).
[271] Haehyun CHO, Penghui ZHANG, Donguk KIM, Jinbum PARK, Choong-Hoon LEE, Ziming ZHAO, Adam DOUPÉ et Gail-Joon AHN. « Prime+Count : Novel Cross-World Covert Channels on ARM TrustZone ». In : *Proceedings of the 34th Annual Computer Security Applications Conference*. ACSAC '18. San Juan, PR, USA : Association for Computing Machinery, 2018, p. 441-452. ISBN : 9781450365697. DOI : 10.1145/3274694.3274704. URL : https://doi.org/10.1145/3274694.3274704 (page 48).

[272] Tianwei ZHANG, Yinqian ZHANG et Ruby LEE. « Analyzing Cache Side Channels Using Deep Neural Networks ». In : *Annual Computer Security Applications Conference*. 2018 (page 49).

[273] Andreas ABEL et Jan REINEKE. « uops.info : Characterizing Latency, Throughput, and Port Usage of Instructions on Intel Microarchitectures ». In : *ASPLOS. ASPLOS '19*. Providence, RI, USA : ACM, 2019, p. 673-686. ISBN : 978-1-4503-6240-5. DOI : 10.1145/3297858.3304062. URL : http://doi.acm.org/10.1145/3297858.3304062 (page 49).

[274] Yuan XIAO, Yinqian ZHANG et Radu TEODORESCU. « SPEECHMINER : A Framework for Investigating and Measuring Speculative Execution Vulnerabilities ». In : *27th Annual Network and Distributed System Security Symposium, NDSS 2020, San Diego, California, USA, February 23-26, 2020*. The Internet Society, 2020. URL : https://www.ndss-symposium.org/ndss-paper/speechminer-a-framework-for-investigating-and-measuring-speculative-execution-vulnerabilities/ (page 49).

[275] A. ABEL et J. REINEKE. « Reverse engineering of cache replacement policies in Intel microprocessors and their evaluation ». In : *2014 IEEE International Symposium on Performance Analysis of Systems and Software (ISPASS)*. 2014, p. 141-142. DOI : 10.1109/ISPASS.2014.6844475 (page 49).

[276] Clémentine MAURICE, Nicolas LE SCOUARNEC, Christoph NEUMANN, Olivier HEEN et Aurélien FRANCILLON. « Reverse Engineering Intel Last-Level Cache Complex Addressing Using Performance Counters ». In : *RAID'15*. 2015 (page 49).

[277] Marc GREEN, Leandro RODRIGUES-LIMA, Andreas ZANKL, Gorka IRAZOQUI, Johann HEYSZL et Thomas EISENBARTH. « AutoLock : Why Cache Attacks on ARM Are Harder Than You Think ». In : *26th USENIX Security Symposium (USENIX Security 17)*. Vancouver, BC : USENIX Association, août 2017, p. 1075-1091. ISBN : 978-1-931971-40-9. URL : https://www.usenix.org/conference/usenixsecurity17/technical-sessions/presentation/green (page 49).

[278] Youngjoo SHIN, Hyung Chan KIM, Dokeun KWON, Ji Hoon JEONG et Junbeom HUR. « Unveiling Hardware-Based Data Prefetcher, a Hidden Source of Information Leakage ». In : *Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security*. CCS '18. Toronto, Canada : Association for Computing Machinery, 2018, p. 131-145. ISBN : 9781450356930. DOI : 10.1145/3243734.3243736. URL : https://doi.org/10.1145/3243734.3243736 (page 50).

[279] Wei SONG et Peng LIU. « Dynamically Finding Minimal Eviction Sets Can Be Quicker Than You Think for Side-Channel Attacks against the LLC ». In : *22nd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2019)*. Chaoyang District, Beijing : USENIX Association, sept. 2019, p. 427-442. ISBN : 978-1-939133-07-6. URL : https://www.usenix.org/conference/raid2019/presentation/song (page 50).
[271] Haehyun CHO, Penghui ZHANG, Donguk KIM, Jinbum PARK, Choong-Hoon LEE, Ziming ZHAO, Adam DOUPÉ et Gail-Joon AHN. « Prime+Count : Novel Cross-World Covert Channels on ARM TrustZone ». In : *Proceedings of the 34th Annual Computer Security Applications Conference*. ACSAC '18. San Juan, PR, USA : Association for Computing Machinery, 2018, p. 441-452. ISBN : 9781450365697. DOI : 10.1145/3274694.3274704. URL : https://doi.org/10.1145/3274694.3274704 (page 48).

[272] Tianwei ZHANG, Yinqian ZHANG et Ruby LEE. « Analyzing Cache Side Channels Using Deep Neural Networks ». In : *Annual Computer Security Applications Conference*. 2018 (page 49).

[273] Andreas ABEL et Jan REINEKE. « uops.info : Characterizing Latency, Throughput, and Port Usage of Instructions on Intel Microarchitectures ». In : *ASPLOS. ASPLOS '19*. Providence, RI, USA : ACM, 2019, p. 673-686. ISBN : 978-1-4503-6240-5. DOI : 10.1145/3297858.3304062. URL : http://doi.acm.org/10.1145/3297858.3304062 (page 49).

[274] Yuan XIAO, Yinqian ZHANG et Radu TEODORESCU. « SPEECHMINER : A Framework for Investigating and Measuring Speculative Execution Vulnerabilities ». In : *27th Annual Network and Distributed System Security Symposium, NDSS 2020, San Diego, California, USA, February 23-26, 2020*. The Internet Society, 2020. URL : https://www.ndss-symposium.org/ndss-paper/speechminer-a-framework-for-investigating-and-measuring-speculative-execution-vulnerabilities/ (page 49).

[275] A. ABEL et J. REINEKE. « Reverse engineering of cache replacement policies in Intel microprocessors and their evaluation ». In : *2014 IEEE International Symposium on Performance Analysis of Systems and Software (ISPASS)*. 2014, p. 141-142. DOI : 10.1109/ISPASS.2014.6844475 (page 49).

[276] Clémentine MAURICE, Nicolas LE SCOUARNEC, Christoph NEUMANN, Olivier HEEN et Aurélien FRANCILLON. « Reverse Engineering Intel Last-Level Cache Complex Addressing Using Performance Counters ». In : *RAID'15*. 2015 (page 49).

[277] Marc GREEN, Leandro RODRIGUES-LIMA, Andreas ZANKL, Gorka IRAZOQUI, Johann HEYSZL et Thomas EISENBARTH. « AutoLock : Why Cache Attacks on ARM Are Harder Than You Think ». In : *26th USENIX Security Symposium (USENIX Security 17)*. Vancouver, BC : USENIX Association, août 2017, p. 1075-1091. ISBN : 978-1-931971-40-9. URL : https://www.usenix.org/conference/usenixsecurity17/technical-sessions/presentation/green (page 49).

[278] Youngjoo SHIN, Hyung Chan KIM, Dokeun KWON, Ji Hoon JEONG et Junbeom HUR. « Unveiling Hardware-Based Data Prefetcher, a Hidden Source of Information Leakage ». In : *Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security*. CCS '18. Toronto, Canada : Association for Computing Machinery, 2018, p. 131-145. ISBN : 9781450356930. DOI : 10.1145/3243734.3243736. URL : https://doi.org/10.1145/3243734.3243736 (page 50).

[279] Wei SONG et Peng LIU. « Dynamically Finding Minimal Eviction Sets Can Be Quicker Than You Think for Side-Channel Attacks against the LLC ». In : *22nd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2019)*. Chaoyang District, Beijing : USENIX Association, sept. 2019, p. 427-442. ISBN : 978-1-939133-07-6. URL : https://www.usenix.org/conference/raid2019/presentation/song (page 50).
[280] M. KURTH, B. GRAS, D. ANDRIESSE, C. GIUFFRIDA, H. BOS et K. RAZAVI. « Net-CAT : Practical Cache Attacks from the Network ». In : *2020 IEEE Symposium on Security and Privacy (SP)*. 2020, p. 20-38. DOI : 10.1109/SP40000.2020.00082 (page 50).

[281] Peter PESSL, Daniel GRUSS, Clémentine MAURICE, Michael SCHWARZ et Stefan MANGARD. « DRAMA : Exploiting DRAM Addressing for Cross-CPU Attacks ». In : *25th USENIX Security Symposium (USENIX Security 16)*. Austin, TX : USENIX Association, août 2016, p. 565-581. ISBN : 978-1-931971-32-4. URL : https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/pessl (page 50).

[282] Andrei TATAR, Cristiano GIUFFRIDA, Herbert BOS et Kaveh RAZAVI. « Defeating Software Mitigations against Rowhammer : A Surgical Precision Hammer ». In : *RAID*. Best Paper Award. Sept. 2018. URL : Paper=https://download.vusec.net/papers/hammertime_raid18.pdf%20Code=https://github.com/vusec/hammertime (page 50).

[283] L. COJOCAR, K. RAZAVI, C. GIUFFRIDA et H. BOS. « Exploiting Correcting Codes : On the Effectiveness of ECC Memory Against Rowhammer Attacks ». In : *2019 IEEE Symposium on Security and Privacy (SP)*. 2019, p. 55-71. DOI : 10.1109/SP.2019.00089 (page 51).

[284] P. FRIGO, E. VANNACC, H. HASSAN, V. der VEEN, O. MUTLU, C. GIUFFRIDA, H. BOS et K. RAZAVI. « TRRespass : Exploiting the Many Sides of Target Row Refresh ». In : *2020 IEEE Symposium on Security and Privacy (SP)*. Los Alamitos, CA, USA : IEEE Computer Society, mai 2020, p. 747-762. DOI : 10.1109/SP40000.2020.00090. URL : https://doi.ieeecomputersociety.org/10.1109/SP40000.2020.00090 (page 51).

[285] Saad ISLAM, Ahmad MOGHIMI, Ida BRUHNS, Moritz KREBBEL, Berk GULMEZOGLU, Thomas EISENBARTH et Berk SUNAR. « SPOILER : Speculative Load Hazards Boost Rowhammer and Cache Attacks ». In : *28th USENIX Security Symposium (USENIX Security 19)*. Santa Clara, CA : USENIX Association, août 2019, p. 621-637. ISBN : 978-1-939133-06-9. URL : https://www.usenix.org/conference/usenixsecurity19/presentation/islam (page 51).

[286] Philipp KOPPE, Benjamin KOLLENDA, Marc FYRBIAK, Christian KISON, Robert GAWLIK, Christof PAAR et Thorsten HOLZ. « Reverse Engineering x86 Processor Microcode ». In : *USENIX Security'17*. 2017 (page 51).

[287] Benjamin KOLLENDA, Philipp KOPPE, Marc FYRBIAK, Christian KISON, Christof PAAR et Thorsten HOLZ. « An Exploratory Analysis of Microcode as a Building Block for System Defenses ». In : CCS '18. Toronto, Canada : Association for Computing Machinery, 2018, p. 1649-1666. ISBN : 9781450356930. DOI : 10.1145/3243734.3243861. URL : https://doi.org/10.1145/3243734.3243861 (page 51).

[288] chip-red-pill/IntelTXE-PoC : Intel Management Engine JTAG Proof of Concept. Positive Technology. URL : https://github.com/chip-red-pill/IntelTXE-PoC (page 52).

[289] chip-red-pill/crbusScripts : IPC scripts for access to Intel CRBUS. Positive Technology. URL : https://github.com/chip-red-pill/crbusScripts (page 52).

[290] Chris DOMAS. *Breaking the x86 ISA*. 2017. URL : https://www.youtube.com/watch?v=KrksBdWcZgQ (page 52).
[280] M. KURTH, B. GRAS, D. ANDRIESSE, C. GIUFFRIDA, H. BOS et K. RAZAVI. « Net-CAT : Practical Cache Attacks from the Network ». In : *2020 IEEE Symposium on Security and Privacy (SP)*. 2020, p. 20-38. DOI : 10.1109/SP40000.2020.00082 (page 50).

[281] Peter PESSL, Daniel GRUSS, Clémentine MAURICE, Michael SCHWARZ et Stefan MANGARD. « DRAMA : Exploiting DRAM Addressing for Cross-CPU Attacks ». In : *25th USENIX Security Symposium (USENIX Security 16)*. Austin, TX : USENIX Association, août 2016, p. 565-581. ISBN : 978-1-931971-32-4. URL : https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/pessl (page 50).

[282] Andrei TATAR, Cristiano GIUFFRIDA, Herbert BOS et Kaveh RAZAVI. « Defeating Software Mitigations against Rowhammer : A Surgical Precision Hammer ». In : *RAID*. Best Paper Award. Sept. 2018. URL : Paper=https://download.vusec.net/papers/hammertime_raid18.pdf%20Code=https://github.com/vusec/hammertime (page 50).

[283] L. COJOCAR, K. RAZAVI, C. GIUFFRIDA et H. BOS. « Exploiting Correcting Codes : On the Effectiveness of ECC Memory Against Rowhammer Attacks ». In : *2019 IEEE Symposium on Security and Privacy (SP)*. 2019, p. 55-71. DOI : 10.1109/SP.2019.00089 (page 51).

[284] P. FRIGO, E. VANNACC, H. HASSAN, V. der VEEN, O. MUTLU, C. GIUFFRIDA, H. BOS et K. RAZAVI. « TRRespass : Exploiting the Many Sides of Target Row Refresh ». In : *2020 IEEE Symposium on Security and Privacy (SP)*. Los Alamitos, CA, USA : IEEE Computer Society, mai 2020, p. 747-762. DOI : 10.1109/SP40000.2020.00090. URL : https://doi.ieeecomputersociety.org/10.1109/SP40000.2020.00090 (page 51).

[285] Saad ISLAM, Ahmad MOGHIMI, Ida BRUHNS, Moritz KREBBEL, Berk GULMEZOGLU, Thomas EISENBARTH et Berk SUNAR. « SPOILER : Speculative Load Hazards Boost Rowhammer and Cache Attacks ». In : *28th USENIX Security Symposium (USENIX Security 19)*. Santa Clara, CA : USENIX Association, août 2019, p. 621-637. ISBN : 978-1-939133-06-9. URL : https://www.usenix.org/conference/usenixsecurity19/presentation/islam (page 51).

[286] Philipp KOPPE, Benjamin KOLLENDA, Marc FYRBIAK, Christian KISON, Robert GAWLIK, Christof PAAR et Thorsten HOLZ. « Reverse Engineering x86 Processor Microcode ». In : *USENIX Security'17*. 2017 (page 51).

[287] Benjamin KOLLENDA, Philipp KOPPE, Marc FYRBIAK, Christian KISON, Christof PAAR et Thorsten HOLZ. « An Exploratory Analysis of Microcode as a Building Block for System Defenses ». In : CCS '18. Toronto, Canada : Association for Computing Machinery, 2018, p. 1649-1666. ISBN : 9781450356930. DOI : 10.1145/3243734.3243861. URL : https://doi.org/10.1145/3243734.3243861 (page 51).

[288] chip-red-pill/IntelTXE-PoC : Intel Management Engine JTAG Proof of Concept. Positive Technology. URL : https://github.com/chip-red-pill/IntelTXE-PoC (page 52).

[289] chip-red-pill/crbusScripts : IPC scripts for access to Intel CRBUS. Positive Technology. URL : https://github.com/chip-red-pill/crbusScripts (page 52).

[290] Chris DOMAS. *Breaking the x86 ISA*. 2017. URL : https://www.youtube.com/watch?v=KrksBdWcZgQ (page 52).
[291] Christopher DOMAS. Hardware Backdoors in x86 CPUs. 2018. URL: https://i.blackhat.com/us-18/Thu-August-9/us-18-Domas-God-Mode-Unlocked-Hardware-Backdoors-In-x86-CPUs-wp.pdf (page 52).

[292] Marco OLIVERIO, Kaveh RAZAVI, Herbert BOS et Cristiano GIUFFRIDA. « Secure Page Fusion with VUsion : Https://Www.Vusec.Net/Projects/VUsion ». In: *Proceedings of the 26th Symposium on Operating Systems Principles*. SOSP '17. Shanghai, China : Association for Computing Machinery, 2017, p. 531-545. ISBN: 9781450350853. DOI: 10.1145/3132747.3132781. URL: https://doi.org/10.1145/3132747.3132781 (page 52).

[293] Michael SCHWARZ, Moritz LIPP et Daniel GRUSS. « JavaScript Zero : Real JavaScript and Zero Side-Channel Attacks ». English. In: *Network and Distributed System Security Symposium 2018*. Fév. 2018, p. 15 (page 52).

[294] Gorka IRAZOQUI, Thomas EISENBARTH et Berk SUNAR. « MASCAT : Preventing Microarchitectural Attacks Before Distribution ». In : *Proceedings of the Eighth ACM Conference on Data and Application Security and Privacy, CODASPY 2018, Tempe, AZ, USA, March 19-21, 2018*. Sous la dir. de Ziming ZHAO, Gail-Joon AHN, Ram KRISHNAN et Gabriel GHINITA. ACM, 2018, p. 377-388. DOI: 10.1145/3176258.3176316. URL: https://doi.org/10.1145/3176258.3176316 (page 52).

[295] Qian GE, Yuval YAROM et Gernot HEISER. « No Security Without Time Protection : We Need a New Hardware-Software Contract ». In : *Proceedings of the 9th Asia-Pacific Workshop on Systems, APSys 2018, Jeju Island, Republic of Korea, August 27-28, 2018*. ACM, 2018, 1:1-1:9. DOI: 10.1145/3265723.3265724. URL: https://doi.org/10.1145/3265723.3265724 (pages 53, 63, 64).

[296] Qian GE, Yuval YAROM, Tom CHOTHIA et Gernot HEISER. « Time Protection : The Missing OS Abstraction ». In : *Proceedings of the Fourteenth EuroSys Conference 2019, Dresden, Germany, March 25-28, 2019*. Sous la dir. de George CANDEA, Robbert van RENESSE et Christof FETZER. ACM, 2019, 1:1-1:17. DOI: 10.1145/3302424.3303976. URL: https://doi.org/10.1145/3302424.3303976 (page 53).

[297] Marco GUARNIERI, Boris KÖPF, Jan REINEKE et Pepe VILA. « Hardware-Software Contracts for Secure Speculation ». In : *2021 IEEE Symposium on Security and Privacy, SP 2021, Proceedings, San Francisco, California, USA*. Mai 2021. URL: https://arxiv.org/abs/2006.03841 (page 53).

[298] Qian GE, Yuval YAROM, David COCK et Gernot HEISER. « A survey of microarchitectural timing attacks and countermeasures on contemporary hardware ». In : *J. Cryptogr. Eng.* 8.1 (2018), p. 1-27. DOI: 10.1007/s13389-016-0141-6. URL: https://doi.org/10.1007/s13389-016-0141-6 (page 53).

[299] Maria MUSHTAQ, Muhammad ASIM MUKHTAR, Vianney LAPOTRE, Muhammad khurram BHATTI et Guy GOGNIAT. « Winter is here! A decade of cache-based side-channel attacks, detection & mitigation for RSA ». In : *Information Systems (2020)*. DOI: 10.1016/j.is.2020.101524. URL: https://hal.archives-ouvertes.fr/hal-02537540 (page 53).

[300] Goran DOYCHEV, Dominik FELD, Boris KOPF, Laurent MAUBORGNE et Jan REINEKE. « CacheAudit : A Tool for the Static Analysis of Cache Side Channels ». In : *22nd USENIX Security Symposium (USENIX Security 13)*. Washington, D.C. : USENIX Association, août 2013, p. 431-446. ISBN : 978-1-931971-03-4.
[291] Christopher DOMAS. Hardware Backdoors in x86 CPUs. 2018. URL: https://i.blackhat.com/us-18/Thu-August-9/us-18-Domas-God-Mode-Unlocked-Hardware-Backdoors-In-x86-CPUs-wp.pdf (page 52).

[292] Marco OLIVERIO, Kaveh RAZAVI, Herbert BOS et Cristiano GIUFFRIDA. « Secure Page Fusion with VUsion : Https://Www.Vusec.Net/Projects/VUsion ». In: *Proceedings of the 26th Symposium on Operating Systems Principles*. SOSP '17. Shanghai, China : Association for Computing Machinery, 2017, p. 531-545. ISBN: 9781450350853. DOI: 10.1145/3132747.3132781. URL: https://doi.org/10.1145/3132747.3132781 (page 52).

[293] Michael SCHWARZ, Moritz LIPP et Daniel GRUSS. « JavaScript Zero : Real JavaScript and Zero Side-Channel Attacks ». English. In: *Network and Distributed System Security Symposium 2018*. Fév. 2018, p. 15 (page 52).

[294] Gorka IRAZOQUI, Thomas EISENBARTH et Berk SUNAR. « MASCAT : Preventing Microarchitectural Attacks Before Distribution ». In : *Proceedings of the Eighth ACM Conference on Data and Application Security and Privacy, CODASPY 2018*, Tempe, AZ, USA, March 19-21, 2018. Sous la dir. de Ziming ZHAO, Gail-Joon AHN, Ram KRISHNAN et Gabriel GHINITA. ACM, 2018, p. 377-388. DOI: 10.1145/3176258.3176316. URL: https://doi.org/10.1145/3176258.3176316 (page 52).

[295] Qian GE, Yuval YAROM et Gernot HEISER. « No Security Without Time Protection : We Need a New Hardware-Software Contract ». In : *Proceedings of the 9th Asia-Pacific Workshop on Systems, APSys 2018*, Jeju Island, Republic of Korea, August 27-28, 2018. ACM, 2018, 1:1-1:9. DOI: 10.1145/3265723.3265724. URL: https://doi.org/10.1145/3265723.3265724 (pages 53, 63, 64).

[296] Qian GE, Yuval YAROM, Tom CHOTHIA et Gernot HEISER. « Time Protection : The Missing OS Abstraction ». In : *Proceedings of the Fourteenth EuroSys Conference 2019*, Dresden, Germany, March 25-28, 2019. Sous la dir. de George CANDEA, Robbert van RENESSE et Christof FETZER. ACM, 2019, 1:1-1:17. DOI: 10.1145/3302424.3303976. URL: https://doi.org/10.1145/3302424.3303976 (page 53).

[297] Marco GUARNIERI, Boris KÖPF, Jan REINEKE et Pepe VILA. « Hardware-Software Contracts for Secure Speculation ». In : *2021 IEEE Symposium on Security and Privacy*, SP 2021, *Proceedings*, San Francisco, California, USA. Mai 2021. URL: https://arxiv.org/abs/2006.03841 (page 53).

[298] Qian GE, Yuval YAROM, David COCK et Gernot HEISER. « A survey of microarchitectural timing attacks and countermeasures on contemporary hardware ». In : *J. Cryptogr. Eng.* 8.1 (2018), p. 1-27. DOI: 10.1007/s13389-016-0141-6. URL: https://doi.org/10.1007/s13389-016-0141-6 (page 53).

[299] Maria MUSHTAQ, Muhammad ASIM MUKHTAR, Vianney LAPOTRE, Muhammad khurram BHATTI et Guy GOGNIAT. « Winter is here! A decade of cache-based side-channel attacks, detection & mitigation for RSA ». In : *Information Systems (2020)*. DOI: 10.1016/j.is.2020.101524. URL: https://hal.archives-ouvertes.fr/hal-02537540 (page 53).

[300] Goran DOYCHEV, Dominik FELD, Boris KOPF, Laurent MAUBORGNE et Jan REINEKE. « CacheAudit : A Tool for the Static Analysis of Cache Side Channels ». In : *22nd USENIX Security Symposium (USENIX Security 13)*. Washington, D.C. : USENIX Association, août 2013, p. 431-446. ISBN : 978-1-931971-03-4.
URL: https://www.usenix.org/conference/usenixsecurity13/technical-sessions/paper/doychev (page 53).

[301] Gilles BARTHE, Gustavo BETARTE, Juan CAMPO, Carlos LUNA et David PICHARDIE. « System-Level Non-Interference for Constant-Time Cryptography ». In: *Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security*. CCS '14. Scottsdale, Arizona, USA: Association for Computing Machinery, 2014, p. 1267-1279. ISBN: 9781450329576. DOI: 10.1145/2660267.2660283. URL: https://doi.org/10.1145/2660267.2660283 (page 54).

[302] agl/ctgrind: *Checking that functions are constant time with Valgrind*. URL: https://github.com/agl/ctgrind (page 54).

[303] Jose Bacelar ALMEIDA, Manuel BARBOSA, Gilles BARTHE, François DUPRESSOIR et Michael EMMI. « Verifying Constant-Time Implementations ». In: *25th USENIX Security Symposium (USENIX Security 16)*. Austin, TX: USENIX Association, août 2016, p. 53-70. ISBN: 978-1-931971-32-4. URL: https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/almeida (page 54).

[304] Shuai WANG, Pei WANG, Xiao LIU, Danfeng ZHANG et Dinghao WU. « CacheD : Identifying Cache-Based Timing Channels in Production Software ». In : *26th USENIX Security Symposium (USENIX Security 17)*. Vancouver, BC : USENIX Association, août 2017, p. 235-252. ISBN : 978-1-931971-40-9. URL : https://www.usenix.org/conference/usenixsecurity17/technical-sessions/presentation/wang-shuai (page 54).

[305] Yuan XIAO, Mengyuan LI, Sanchuan CHEN et Yinqian ZHANG. « STACCO : Dif- ferentially Analyzing Side-Channel Traces for Detecting SSL/TLS Vulnerabilities in Secure Enclaves ». In : *Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security*. CCS '17. Dallas, Texas, USA : Asso- ciation for Computing Machinery, 2017, p. 859-874. ISBN : 9781450349468. DOI : 10.1145/3133956.3134016. URL : https://doi.org/10.1145/3133956.3134016 (page 54).

[306] Samuel WEISER, Andreas ZANKL, Raphael SPREITZER, Katja MILLER, Stefan MANGARD et Georg SIGL. « DATA – Differential Address Trace Analysis : Finding Address-based Side-Channels in Binaries ». In : *27th USENIX Security Symposium (USENIX Security 18)*. Baltimore, MD : USENIX Association, août 2018, p. 603-620. ISBN : 978-1-939133-04-5. URL : https://www.usenix.org/conference/usenixsecurity18/presentation/weiser (page 54).

[307] Jan WICHELMANN, Ahmad MOGHIMI, Thomas EISENBARTH et Berk SUNAR. « MicroWalk : A Framework for Finding Side Channels in Binaries ». In : *Proceedings of the 34th Annual Computer Security Applications Conference, ACSAC 2018, San Juan, PR, USA, December 03-07, 2018*. ACM, 2018, p. 161-173. DOI : 10.1145/3274694.3274741. URL : https://doi.org/10.1145/3274694.3274741 (page 54).

[308] Wubing WANG, Yinqian ZHANG et Zhiqiang LIN. « Time and Order : Towards Automatically Identifying Side-Channel Vulnerabilities in Enclave Binaries ». In : *22nd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2019)*. Chaoyang District, Beijing : USENIX Association, sept. 2019, p. 443-457. ISBN : 978-1-939133-07-6. URL : https://www.usenix.org/conference/raid2019/presentation/wang-wubing (page 54).
URL: https://www.usenix.org/conference/usenixsecurity13/technical-sessions/paper/doychev (page 53).

[301] Gilles BARTHE, Gustavo BETARTE, Juan CAMPO, Carlos LUNA et David PICHARDIE. « System-Level Non-Interference for Constant-Time Cryptography ». In: *Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security*. CCS '14. Scottsdale, Arizona, USA: Association for Computing Machinery, 2014, p. 1267-1279. ISBN: 9781450329576. DOI: 10.1145/2660267.2660283. URL: https://doi.org/10.1145/2660267.2660283 (page 54).

[302] agl/ctgrind: *Checking that functions are constant time with Valgrind*. URL: https://github.com/agl/ctgrind (page 54).

[303] Jose Bacelar ALMEIDA, Manuel BARBOSA, Gilles BARTHE, François DUPRESSOIR et Michael EMMI. « Verifying Constant-Time Implementations ». In: *25th USENIX Security Symposium (USENIX Security 16)*. Austin, TX: USENIX Association, août 2016, p. 53-70. ISBN: 978-1-931971-32-4. URL: https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/almeida (page 54).

[304] Shuai WANG, Pei WANG, Xiao LIU, Danfeng ZHANG et Dinghao WU. « CacheD: Identifying Cache-Based Timing Channels in Production Software ». In: *26th USENIX Security Symposium (USENIX Security 17)*. Vancouver, BC: USENIX Association, août 2017, p. 235-252. ISBN: 978-1-931971-40-9. URL: https://www.usenix.org/conference/usenixsecurity17/technical-sessions/presentation/wang-shuai (page 54).

[305] Yuan XIAO, Mengyuan LI, Sanchuan CHEN et Yinqian ZHANG. « STACCO : Dif- ferentially Analyzing Side-Channel Traces for Detecting SSL/TLS Vulnerabilities in Secure Enclaves ». In : *Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security*. CCS '17. Dallas, Texas, USA : Asso- ciation for Computing Machinery, 2017, p. 859-874. ISBN : 9781450349468. DOI : 10.1145/3133956.3134016. URL : https://doi.org/10.1145/3133956.3134016 (page 54).

[306] Samuel WEISER, Andreas ZANKL, Raphael SPREITZER, Katja MILLER, Stefan MANGARD et Georg SIGL. « DATA – Differential Address Trace Analysis : Finding Address-based Side-Channels in Binaries ». In: *27th USENIX Security Symposium (USENIX Security 18)*. Baltimore, MD: USENIX Association, août 2018, p. 603-620. ISBN: 978-1-939133-04-5. URL: https://www.usenix.org/conference/usenixsecurity18/presentation/weiser (page 54).

[307] Jan WICHELMANN, Ahmad MOGHIMI, Thomas EISENBARTH et Berk SUNAR. « MicroWalk : A Framework for Finding Side Channels in Binaries ». In : *Proceedings of the 34th Annual Computer Security Applications Conference, ACSAC 2018, San Juan, PR, USA, December 03-07, 2018*. ACM, 2018, p. 161-173. DOI: 10.1145/3274694.3274741. URL: https://doi.org/10.1145/3274694.3274741 (page 54).

[308] Wubing WANG, Yinqian ZHANG et Zhiqiang LIN. « Time and Order : Towards Automatically Identifying Side-Channel Vulnerabilities in Enclave Binaries ». In: *22nd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2019)*. Chaoyang District, Beijing: USENIX Association, sept. 2019, p. 443-457. ISBN: 978-1-939133-07-6. URL: https://www.usenix.org/conference/raid2019/presentation/wang-wubing (page 54).
[309] Stephen CRANE, Andrei HOMESCU, Stefan BRUNTHALER, Per LARSEN et Michael FRANZ. « Thwarting Cache Side-Channel Attacks Through Dynamic Software Diversity ». In: *22nd Annual Network and Distributed System Security Symposium, NDSS 2015, San Diego, California, USA, February 8-11, 2015*. The Internet Society, 2015. URL: https://www.ndss-symposium.org/ndss2015/thwarting-cache-side-channel-attacks-through-dynamic-software-diversity (page 54).

[310] Ashay RANE, Calvin LIN et Mohit TIWARI. « Raccoon : Closing Digital Side-Channels through Obfuscated Execution ». In : *24th USENIX Security Symposium (USENIX Security 15)*. Washington, D.C. : USENIX Association, août 2015, p. 431-446. ISBN : 978-1-939133-11-3. URL : https://www.usenix.org/conference/usenixsecurity15/technical-sessions/presentation/rane (page 54).

[311] Ferdinand BRASSER, Srdjan CAPKUN, Alexandra DMITRIENKO, Tommaso FRASSETTO, Kari KOSTIAINEN et Ahmad-Reza SADEGHI. « DR.SGX : Automated and Adjustable Side-Channel Protection for SGX Using Data Location Randomization ». In : *Proceedings of the 35th Annual Computer Security Applications Conference*. ACSAC '19. San Juan, Puerto Rico, USA : Association for Computing Machinery, 2019, p. 788-800. ISBN : 9781450376280. DOI : 10.1145/3359789.3359809. URL : https://doi.org/10.1145/3359789.3359809 (page 55).

[312] Taesoo KIM, Marcus PEINADO et Gloria MAINAR-RUIZ. « STEALTHMEM : System-Level Protection Against Cache-Based Side Channel Attacks in the Cloud ». In : *21st USENIX Security Symposium (USENIX Security 12)*. Bellevue, WA : USENIX Association, août 2012, p. 189-204. URL : https://www.usenix.org/conference/usenixsecurity12/technical-sessions/presentation/kim (page 55).

[313] Ziqiao ZHOU, Michael K. REITER et Yinqian ZHANG. « A Software Approach to Defeating Side Channels in Last-Level Caches ». In : *Proceedings of the ACM SIGSAC Conference on Computer and Communications Security*. CCS'16. Vienna, Austria : ACM, 2016, p. 871-882. DOI : 10.1145/2976749.2978324 (page 55).

[314] *Improving Real-Time Performance by Utilizing Cache Allocation Technology*. Intel Corporation. 2015. URL: https://www.intel.com/content/dam/www/public/us/en/documents/white-papers/cache-allocation-technology-white-paper.pdf (page 55).

[315] F. LIU, Q. GE, Y. YAROM, F. MCKEEN, C. ROZAS, G. HEISER et R. B. LEE. « CA-Talyst : Defeating last-level cache side channel attacks in cloud computing ». In : *2016 IEEE International Symposium on High Performance Computer Architecture (HPCA)*. 2016, p. 406-418. DOI : 10.1109/HPCA.2016.7446082 (page 55).

[316] Vladimir KIRIANSKY, Ilia LEBEDEV, Saman AMARASINGHE, Srinivas DEVADAS et Joel EMER. « DAWG : A Defense against Cache Timing Attacks in Speculative Execution Processors ». In : MICRO-51. Fukuoka, Japan : IEEE Press, 2018, p. 974-987. ISBN : 9781538662403. DOI : 10.1109/MICRO.2018.00083. URL : https://doi.org/10.1109/MICRO.2018.00083 (page 55).

[317] Ghada DESSOUKY, Tommaso FRASSETTO et Ahmad-Reza SADEGHI. « Hyb-Cache : Hybrid Side-Channel-Resilient Caches for Trusted Execution Environments ». In : *29th USENIX Security Symposium (USENIX Security 20)*. USENIX Association, août 2020, p. 451-468. ISBN : 978-1-939133-17-5. URL : https:
[309] Stephen CRANE, Andrei HOMESCU, Stefan BRUNTHALER, Per LARSEN et Michael FRANZ. « Thwarting Cache Side-Channel Attacks Through Dynamic Software Diversity ». In: *22nd Annual Network and Distributed System Security Symposium, NDSS 2015, San Diego, California, USA, February 8-11, 2015*. The Internet Society, 2015. URL: https://www.ndss-symposium.org/ndss2015/thwarting-cache-side-channel-attacks-through-dynamic-software-diversity (page 54).

[310] Ashay RANE, Calvin LIN et Mohit TIWARI. « Raccoon : Closing Digital Side-Channels through Obfuscated Execution ». In : *24th USENIX Security Symposium (USENIX Security 15)*. Washington, D.C. : USENIX Association, août 2015, p. 431-446. ISBN : 978-1-939133-11-3. URL : https://www.usenix.org/conference/usenixsecurity15/technical-sessions/presentation/rane (page 54).

[311] Ferdinand BRASSER, Srdjan CAPKUN, Alexandra DMITRIENKO, Tommaso FRASSETTO, Kari KOSTIAINEN et Ahmad-Reza SADEGHI. « DR.SGX : Automated and Adjustable Side-Channel Protection for SGX Using Data Location Randomization ». In : *Proceedings of the 35th Annual Computer Security Applications Conference*. ACSAC '19. San Juan, Puerto Rico, USA : Association for Computing Machinery, 2019, p. 788-800. ISBN : 9781450376280. DOI : 10.1145/3359789.3359809. URL : https://doi.org/10.1145/3359789.3359809 (page 55).

[312] Taesoo KIM, Marcus PEINADO et Gloria MAINAR-RUIZ. « STEALTHMEM : System-Level Protection Against Cache-Based Side Channel Attacks in the Cloud ». In : *21st USENIX Security Symposium (USENIX Security 12)*. Bellevue, WA : USENIX Association, août 2012, p. 189-204. URL : https://www.usenix.org/conference/usenixsecurity12/technical-sessions/presentation/kim (page 55).

[313] Ziqiao ZHOU, Michael K. REITER et Yinqian ZHANG. « A Software Approach to Defeating Side Channels in Last-Level Caches ». In : *Proceedings of the ACM SIGSAC Conference on Computer and Communications Security*. CCS'16. Vienna, Austria : ACM, 2016, p. 871-882. DOI : 10.1145/2976749.2978324 (page 55).

[314] *Improving Real-Time Performance by Utilizing Cache Allocation Technology*. Intel Corporation. 2015. URL: https://www.intel.com/content/dam/www/public/us/en/documents/white-papers/cache-allocation-technology-white-paper.pdf (page 55).

[315] F. LIU, Q. GE, Y. YAROM, F. MCKEEN, C. ROZAS, G. HEISER et R. B. LEE. « CA-Talyst : Defeating last-level cache side channel attacks in cloud computing ». In : *2016 IEEE International Symposium on High Performance Computer Architecture (HPCA)*. 2016, p. 406-418. DOI : 10.1109/HPCA.2016.7446082 (page 55).

[316] Vladimir KIRIANSKY, Ilia LEBEDEV, Saman AMARASINGHE, Srinivas DEVADAS et Joel EMER. « DAWG : A Defense against Cache Timing Attacks in Speculative Execution Processors ». In : MICRO-51. Fukuoka, Japan : IEEE Press, 2018, p. 974-987. ISBN : 9781538662403. DOI : 10.1109/MICRO.2018.00083. URL : https://doi.org/10.1109/MICRO.2018.00083 (page 55).

[317] Ghada DESSOUKY, Tommaso FRASSETTO et Ahmad-Reza SADEGHI. « Hyb-Cache : Hybrid Side-Channel-Resilient Caches for Trusted Execution Environments ». In : *29th USENIX Security Symposium (USENIX Security 20)*. USENIX Association, août 2020, p. 451-468. ISBN : 978-1-939133-17-5. URL : https:
//www.usenix.org/conference/usenixsecurity20/presentation/dessouky (page 55).

[318] Mario WERNER, Thomas UNTERLUGGAUER, Lukas GINER, Michael SCHWARZ, Daniel GRUSS et Stefan MANGARD. « ScatterCache : Thwarting Cache Attacks via Cache Set Randomization ». In : 28th USENIX Security Symposium (USENIX Security 19) . Santa Clara, CA : USENIX Association, août 2019, p. 675-692. ISBN : 978-1-939133-06-9. URL : https://www.usenix.org/conference/ usenixsecurity19/presentation/werner (page 55).

[319] Daniel GRUSS, Julian LETTNER, Felix SCHUSTER, Olya OHRIMENKO, Istvan HALLER et Manuel COSTA. « Strong and Efficient Cache Side-Channel Protection using Hardware Transactional Memory ». In : 26th USENIX Security Symposium (USENIX Security 17) . Vancouver, BC : USENIX Association, août 2017, p. 217-233. ISBN : 978-1-931971-40-9. URL : https://www.usenix.org/conference/ usenixsecurity17/technical-sessions/presentation/gruss (page 56).

[320] Daniel GRUSS, Moritz LIPP, Michael SCHWARZ, Richard FELLNER, Clémentine MAURICE et Stefan MANGARD. « KASLR is Dead : Long Live KASLR ». In : Engineering Secure Software and Systems . Sous la dir. d'Eric BODDEN, Mathias PAYER et Elias ATHANASOPOULOS. Cham : Springer International Publishing, 2017, p. 161-176. ISBN : 978-3-319-62105-0 (page 56).

[321] David GENS, Orlando ARIAS, Dean SULLIVAN, Christopher LIEBCHEN, Yier JIN et Ahmad-Reza SADEGHI. « LAZARUS : Practical Side-Channel Resilient Kernel-Space Randomization ». In : Research in Attacks, Intrusions, and Defenses . Sous la dir. de Marc DACIER, Michael BAILEY, Michalis POLYCHRONAKIS et Manos ANTONAKAKIS. Cham : Springer International Publishing, 2017, p. 238-258. ISBN : 978-3-319-66332-6 (page 56).

[322] The kernel development COMMUNITY. Page Table Isolation (PTI) — The Linux Kernel documentation. URL : https://www.kernel.org/doc/html/latest/x86/ pti.html (page 56).

[323] Claudio CANELLA, Michael SCHWARZ, Martin HAUBENWALLNER, Martin SCHWARZL et Daniel GRUSS. « KASLR : Break It, Fix It, Repeat ». In : ASIA CCS '20. Taipei, Taiwan : Association for Computing Machinery, 2020, p. 481-493. ISBN : 9781450367509. DOI : 10.1145/3320269.3384747. URL : https://dl.acm.org/doi/abs/10.1145/3320269.3384747 (page 56).

[324] Yinqian ZHANG et Michael K. REITER. « DüPpel : Retrofitting Commodity Ope- rating Systems to Mitigate Cache Side Channels in the Cloud ». In : Proceedings of the 2013 ACM SIGSAC Conference on Computer & Communications Secu- rity. CCS '13. Berlin, Germany : Association for Computing Machinery, 2013, p. 827-838. ISBN : 9781450324779. DOI : 10.1145/2508859.2516741. URL : https://doi.org/10.1145/2508859.2516741 (page 56).

[325] Venkatanathan VARADARAJAN, Thomas RISTENPART et Michael SWIFT. « Scheduler-based Defenses against Cross-VM Side-channels ». In : 23rd USENIX Security Symposium (USENIX Security 14) . San Diego, CA : USENIX Associa- tion, août 2014, p. 687-702. ISBN : 978-1-931971-15-7. URL : https://www.usenix. org/conference/usenixsecurity14/technical-sessions/presentation/ varadarajan (page 56).

[326] Guoxing CHEN, Wenhao WANG, Tianyu CHEN, Sanchuan CHEN, Yinqian ZHANG, XiaoFeng WANG, Ten-Hwang LAI et Dongdai LIN. « Racing in Hyperspace : Clo- sing Hyper-Threading Side Channels on SGX with Contrived Data Races ». In :
//www.usenix.org/conference/usenixsecurity20/presentation/dessouky (page 55).

[318] Mario WERNER, Thomas UNTERLUGGAUER, Lukas GINER, Michael SCHWARZ, Daniel GRUSS et Stefan MANGARD. « ScatterCache : Thwarting Cache Attacks via Cache Set Randomization ». In : *28th USENIX Security Symposium (USENIX Security 19)*. Santa Clara, CA : USENIX Association, août 2019, p. 675-692. ISBN : 978-1-939133-06-9. URL : https://www.usenix.org/conference/usenixsecurity19/presentation/werner (page 55).

[319] Daniel GRUSS, Julian LETTNER, Felix SCHUSTER, Olya OHRIMENKO, Istvan HALLER et Manuel COSTA. « Strong and Efficient Cache Side-Channel Protection using Hardware Transactional Memory ». In : *26th USENIX Security Symposium (USENIX Security 17)*. Vancouver, BC : USENIX Association, août 2017, p. 217-233. ISBN : 978-1-931971-40-9. URL : https://www.usenix.org/conference/usenixsecurity17/technical-sessions/presentation/gruss (page 56).

[320] Daniel GRUSS, Moritz LIPP, Michael SCHWARZ, Richard FELLNER, Clémentine MAURICE et Stefan MANGARD. « KASLR is Dead : Long Live KASLR ». In : *Engineering Secure Software and Systems*. Sous la dir. d'Eric BODDEN, Mathias PAYER et Elias ATHANASOPOULOS. Cham : Springer International Publishing, 2017, p. 161-176. ISBN : 978-3-319-62105-0 (page 56).

[321] David GENS, Orlando ARIAS, Dean SULLIVAN, Christopher LIEBCHEN, Yier JIN et Ahmad-Reza SADEGHI. « LAZARUS : Practical Side-Channel Resilient Kernel-Space Randomization ». In : *Research in Attacks, Intrusions, and Defenses*. Sous la dir. de Marc DACIER, Michael BAILEY, Michalis POLYCHRONAKIS et Manos ANTONAKAKIS. Cham : Springer International Publishing, 2017, p. 238-258. ISBN : 978-3-319-66332-6 (page 56).

[322] The kernel development COMMUNITY. *Page Table Isolation (PTI) — The Linux Kernel documentation*. URL : https://www.kernel.org/doc/html/latest/x86/pti.html (page 56).

[323] Claudio CANELLA, Michael SCHWARZ, Martin HAUBENWALLNER, Martin SCHWARZL et Daniel GRUSS. « KASLR : Break It, Fix It, Repeat ». In : ASIA CCS '20. Taipei, Taiwan : Association for Computing Machinery, 2020, p. 481-493. ISBN : 9781450367509. DOI : 10.1145/3320269.3384747. URL : https://dl.acm.org/doi/abs/10.1145/3320269.3384747 (page 56).

[324] Yinqian ZHANG et Michael K. REITER. « DüPpel : Retrofitting Commodity Ope- rating Systems to Mitigate Cache Side Channels in the Cloud ». In : *Proceedings of the 2013 ACM SIGSAC Conference on Computer & Communications Secu- rity*. CCS '13. Berlin, Germany : Association for Computing Machinery, 2013, p. 827-838. ISBN : 9781450324779. DOI : 10.1145/2508859.2516741. URL : https://doi.org/10.1145/2508859.2516741 (page 56).

[325] Venkatanathan VARADARAJAN, Thomas RISTENPART et Michael SWIFT. « Scheduler-based Defenses against Cross-VM Side-channels ». In : *23rd USENIX Security Symposium (USENIX Security 14)*. San Diego, CA : USENIX Associa- tion, août 2014, p. 687-702. ISBN : 978-1-931971-15-7. URL : https://www.usenix.org/conference/usenixsecurity14/technical-sessions/presentation/varadarajan (page 56).

[326] Guoxing CHEN, Wenhao WANG, Tianyu CHEN, Sanchuan CHEN, Yinqian ZHANG, XiaoFeng WANG, Ten-Hwang LAI et Dongdai LIN. « Racing in Hyperspace : Clo- sing Hyper-Threading Side Channels on SGX with Contrived Data Races ». In :
39th *IEEE Symposium on Security and Privacy*. IEEE Computer Society, 2018, p. 388-404 (page 56).

[327] Tianwei ZHANG, Yinqian ZHANG et Ruby B. LEE. « CloudRadar : A Real-Time Side-Channel Attack Detection System in Clouds ». In : *19th International Symposium on Research in Attacks, Intrusions, and Defenses*. RAID’16. Paris, France : Springer International Publishing, 2016, p. 118-140. DOI : 10.1007/978-3-319-45719-2_6 (page 57).

[328] Samira BRIONGOS, Gorka IRAZOQUI, Pedro MALAGÓN et Thomas EISENBARTH. « CacheShield : Detecting Cache Attacks through Self-Observation ». In : *Proceedings of the Eighth ACM Conference on Data and Application Security and Privacy, CODASPY 2018, Tempe, AZ, USA, March 19-21, 2018*. Sous la dir. de Ziming ZHAO, Gail-Joon AHN, Ram KRISHNAN et Gabriel GHINITA. ACM, 2018, p. 224-235. DOI : 10.1145/3176258.3176320. URL : https://doi.org/10.1145/3176258.3176320 (page 57).

[329] Maria MUSHTAQ, Ayaz AKRAM, Muhammad Khurram BHATTI, Maham CHAUDHRY, Vianney LAPOTRE et Guy GOGNIAT. « NIGHTS-WATCH : A Cache-Based Side-Channel Intrusion Detector Using Hardware Performance Counters ». In : *Proceedings of the 7th International Workshop on Hardware and Architectural Support for Security and Privacy*. HASP ’18. Los Angeles, California : Association for Computing Machinery, 2018. ISBN : 9781450365000. DOI : 10.1145/3214292.3214293. URL : https://doi.org/10.1145/3214292.3214293 (page 57).

[330] Roberto GUANCIALE, Musard BALLIU et Mads DAM. « InSpectre : Breaking and Fixing Microarchitectural Vulnerabilities by Formal Analysis ». In : *CCS ’20 : 2020 ACM SIGSAC Conference on Computer and Communications Security, Virtual Event, USA, November 9-13, 2020*. Sous la dir. de Jay LIGATTI, Xinming OU, Jonathan KATZ et Giovanni VIGNA. ACM, 2020, p. 1853-1869. DOI : 10.1145/3372297.3417246. URL : https://doi.org/10.1145/3372297.3417246 (page 57).

[331] Guanhua WANG, Sudipta CHATTOPADHYAY, Arnab Kumar BISWAS, Tulika MITRA et Abhik ROYCHOUDHURY. « KLEESpectre : Detecting Information Leakage through Speculative Cache Attacks via Symbolic Execution ». In : 29.3 (juin 2020). ISSN : 1049-331X. DOI : 10.1145/3385897. URL : https://doi.org/10.1145/3385897 (page 57).

[332] Oleksii OLEKSENKO, Bohdan TRACH, Mark SILBERSTEIN et Christof FETZER. « SpecFuzz : Bringing Spectre-type vulnerabilities to the surface ». In : *29th USENIX Security Symposium (USENIX Security 20)*. USENIX Association, août 2020, p. 1481-1498. ISBN : 978-1-939133-17-5. URL : https://www.usenix.org/conference/usenixsecurity20/presentation/oleksenko (page 57).

[333] Andrea MAMBRETTI, Matthias NEUGSCHWANDTNER, Alessandro SORNIOTTI, Engin KIRDA, William ROBERTSON et Anil KURMUS. « Speculator : A Tool to Analyze Speculative Execution Attacks and Mitigations ». In : *Proceedings of the 35th Annual Computer Security Applications Conference*. ACSAC ’19. San Juan, Puerto Rico, USA : Association for Computing Machinery, 2019, p. 747-761. ISBN : 9781450376280. DOI : 10.1145/3359789.3359837. URL : https://doi.org/10.1145/3359789.3359837 (page 58).

[334] SOFTWARE SECURITY GUIDANCE. Intel Corporation. URL : https://software.intel.com/security-software-guidance/ (page 58).
39th *IEEE Symposium on Security and Privacy*. IEEE Computer Society, 2018, p. 388-404 (page 56).

[327] Tianwei ZHANG, Yinqian ZHANG et Ruby B. LEE. « CloudRadar : A Real-Time Side-Channel Attack Detection System in Clouds ». In : *19th International Symposium on Research in Attacks, Intrusions, and Defenses*. RAID’16. Paris, France : Springer International Publishing, 2016, p. 118-140. DOI : 10.1007/978-3-319-45719-2_6 (page 57).

[328] Samira BRIONGOS, Gorka IRAZOQUI, Pedro MALAGÓN et Thomas EISENBARTH. « CacheShield : Detecting Cache Attacks through Self-Observation ». In : *Proceedings of the Eighth ACM Conference on Data and Application Security and Privacy, CODASPY 2018, Tempe, AZ, USA, March 19-21, 2018*. Sous la dir. de Ziming ZHAO, Gail-Joon AHN, Ram KRISHNAN et Gabriel GHINITA. ACM, 2018, p. 224-235. DOI : 10.1145/3176258.3176320. URL : https://doi.org/10.1145/3176258.3176320 (page 57).

[329] Maria MUSHTAQ, Ayaz AKRAM, Muhammad Khurram BHATTI, Maham CHAUDHRY, Vianney LAPOTRE et Guy GOGNIAT. « NIGHTS-WATCH : A Cache-Based Side-Channel Intrusion Detector Using Hardware Performance Counters ». In : *Proceedings of the 7th International Workshop on Hardware and Architectural Support for Security and Privacy*. HASP ’18. Los Angeles, California : Association for Computing Machinery, 2018. ISBN : 9781450365000. DOI : 10.1145/3214292.3214293. URL : https://doi.org/10.1145/3214292.3214293 (page 57).

[330] Roberto GUANCIALE, Musard BALLIU et Mads DAM. « InSpectre : Breaking and Fixing Microarchitectural Vulnerabilities by Formal Analysis ». In : *CCS ’20 : 2020 ACM SIGSAC Conference on Computer and Communications Security, Virtual Event, USA, November 9-13, 2020*. Sous la dir. de Jay LIGATTI, Xinming OU, Jonathan KATZ et Giovanni VIGNA. ACM, 2020, p. 1853-1869. DOI : 10.1145/3372297.3417246. URL : https://doi.org/10.1145/3372297.3417246 (page 57).

[331] Guanhua WANG, Sudipta CHATTOPADHYAY, Arnab Kumar BISWAS, Tulika MITRA et Abhik ROYCHOUDHURY. « KLEESpectre : Detecting Information Leakage through Speculative Cache Attacks via Symbolic Execution ». In : 29.3 (juin 2020). ISSN : 1049-331X. DOI : 10.1145/3385897. URL : https://doi.org/10.1145/3385897 (page 57).

[332] Oleksii OLEKSENKO, Bohdan TRACH, Mark SILBERSTEIN et Christof FETZER. « SpecFuzz : Bringing Spectre-type vulnerabilities to the surface ». In : *29th USENIX Security Symposium (USENIX Security 20)*. USENIX Association, août 2020, p. 1481-1498. ISBN : 978-1-939133-17-5. URL : https://www.usenix.org/conference/usenixsecurity20/presentation/oleksenko (page 57).

[333] Andrea MAMBRETTI, Matthias NEUGSCHWANDTNER, Alessandro SORNIOTTI, Engin KIRDA, William ROBERTSON et Anil KURMUS. « Speculator : A Tool to Analyze Speculative Execution Attacks and Mitigations ». In : *Proceedings of the 35th Annual Computer Security Applications Conference*. ACSAC ’19. San Juan, Puerto Rico, USA : Association for Computing Machinery, 2019, p. 747-761. ISBN : 9781450376280. DOI : 10.1145/3359789.3359837. URL : https://doi.org/10.1145/3359789.3359837 (page 58).

[334] SOFTWARE SECURITY GUIDANCE. Intel Corporation. URL : https://software.intel.com/security-software-guidance/ (page 58).
[335] *Vulnerability of Speculative Processors to Cache Timing Side-Channel Mechanism.*
Arm Limited. 2020. URL: https://developer.arm.com/support/arm-security-
updates/speculative-processor-vulnerability (page 58).

[336] *Software techniques for managing speculation on AMD processors.* Advanced Micro Devices, Inc. 2020. URL: http://developer.amd.com/wp-content/resources/Managing-Speculation-on-AMD-Processors.pdf (page 58).

[337] The kernel development COMMUNITY. *Spectre Side Channels — The Linux Kernel documentation.* URL: https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/spectre.html (page 58).

[338] Andrew PARDOE. *Spectre mitigations in MSVC*. Microsoft. 2018. URL: https://devblogs.microsoft.com/cppblog/spectre-mitigations-in-msvc/ (page 58).

[339] Guanhua WANG, Sudipta CHATTOPADHYAY, Ivan GOTOVCHITS, Tulika MITRA et Abhik ROYCHOUDHURY. *oo7 : Low-overhead Defense against Spectre Attacks via Program Analysis*. 2019. arXiv : 1807.05843 [cs.CR]. URL : https://arxiv.org/abs/1807.05843 (page 58).

[340] M. GUARNIERI, B. KÖPF, J. F. MORALES, J. REINEKE et A. SÁNCHEZ. « Spec-
tector : Principled Detection of Speculative Information Flows ». In : *2020 IEEE
Symposium on Security and Privacy (SP)*. 2020, p. 1-19. DOI : 10.1109/SP40000.
2020.00011 (page 59).

[341] Paul TURNER. *Retpoline : a software construct for preventing branch-target-injection*. Google. URL: https://support.google.com/faqs/answer/7625886 (page 59).

[342] Michael SCHWARZ, Moritz LIPP, Claudio Alberto CANELLA, Robert SCHILLING, Florian KARGL et Daniel GRUSS. « ConTExT : A Generic Approach for Mitigating Spectre ». In : *Network and Distributed System Security Symposium 2020*. Fév. 2020. DOI : 10.14722/ndss.2020.24271 (page 59).

[343] Charles REIS, Alexander MOSCHUK et Nasko OSKOV. « Site Isolation : Pro-
cess Separation for Web Sites within the Browser ». In : *28th USENIX Security
Symposium (USENIX Security 19)*. Santa Clara, CA : USENIX Association, août
2019, p. 1661-1678. ISBN : 978-1-939133-06-9. URL : https://www.usenix.org/
conference/usenixsecurity19/presentation/reis (page 59).

[344] E. KORUYEH, S. Haji Amin SHIRAZI, K. N. KHASAWNEH, C. SONG et N. ABU-GHAZALEH. « SpecCFI : Mitigating Spectre Attacks using CFI Informed Speculation ». In : *2020 IEEE Symposium on Security and Privacy (SP)*. Los Alamitos, CA, USA : IEEE Computer Society, mai 2020, p. 39-53. DOI : 10.1109/SP40000.2020.00033. URL : https://doi.ieeecomputersociety.org/10.1109/SP40000.2020.00033 (page 60).

[345] *What Spectre and Meltdown Mean For WebKit*. 2018. URL: What%20Spectre%20and%20Meltdown%20Mean%20For%20WebKit (page 60).

[346] Chandler CARRUTH. *Speculative Load Hardening*. URL: https://llvm.org/docs/SpeculativeLoadHardening.html (page 60).

[347] Khaled N. KHASAWNEH, Esmaeil Mohammadian KORUYEH, Chengyu SONG, Dmitry EVTYUSHKIN, Dmitry PONOMAREV et Nael ABU-GHAZALEH. « SafeSpec : Banishing the Spectre of a Meltdown with Leakage-Free Speculation ». In : *Proceedings of the 56th Annual Design Automation Conference 2019*. DAC '19. Las Vegas, NV, USA : Association for Computing Machinery, 2019. ISBN : 9781450367257. DOI : 10.1145/3316781.3317903. URL : https://doi.org/10.1145/3316781.3317903 (page 60).
[335] *Vulnerability of Speculative Processors to Cache Timing Side-Channel Mechanism.*
Arm Limited. 2020. URL: https://developer.arm.com/support/arm-security-
updates/speculative-processor-vulnerability (page 58).

[336] *Software techniques for managing speculation on AMD processors.* Advanced Micro Devices, Inc. 2020. URL: http://developer.amd.com/wp-content/resources/Managing-Speculation-on-AMD-Processors.pdf (page 58).

[337] The kernel development COMMUNITY. *Spectre Side Channels — The Linux Kernel documentation.* URL: https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/spectre.html (page 58).

[338] Andrew PARDOE. *Spectre mitigations in MSVC*. Microsoft. 2018. URL: https://devblogs.microsoft.com/cppblog/spectre-mitigations-in-msvc/ (page 58).

[339] Guanhua WANG, Sudipta CHATTOPADHYAY, Ivan GOTOVCHITS, Tulika MITRA et Abhik ROYCHOUDHURY. *oo7 : Low-overhead Defense against Spectre Attacks via Program Analysis*. 2019. arXiv : 1807.05843 [cs.CR]. URL : https://arxiv.org/abs/1807.05843 (page 58).

[340] M. GUARNIERI, B. KÖPF, J. F. MORALES, J. REINEKE et A. SÁNCHEZ. « Spec-
tector : Principled Detection of Speculative Information Flows ». In : *2020 IEEE
Symposium on Security and Privacy (SP)*. 2020, p. 1-19. DOI : 10.1109/SP40000.
2020.00011 (page 59).

[341] Paul TURNER. *Retpoline : a software construct for preventing branch-target-injection*. Google. URL: https://support.google.com/faqs/answer/7625886 (page 59).

[342] Michael SCHWARZ, Moritz LIPP, Claudio Alberto CANELLA, Robert SCHILLING, Florian KARGL et Daniel GRUSS. « ConTExT : A Generic Approach for Mitigating Spectre ». In : *Network and Distributed System Security Symposium 2020*. Fév. 2020. DOI : 10.14722/ndss.2020.24271 (page 59).

[343] Charles REIS, Alexander MOSCHUK et Nasko OSKOV. « Site Isolation : Pro-
cess Separation for Web Sites within the Browser ». In : *28th USENIX Security
Symposium (USENIX Security 19)*. Santa Clara, CA : USENIX Association, août
2019, p. 1661-1678. ISBN : 978-1-939133-06-9. URL : https://www.usenix.org/
conference/usenixsecurity19/presentation/reis (page 59).

[344] E. KORUYEH, S. Haji Amin SHIRAZI, K. N. KHASAWNEH, C. SONG et N. ABU-GHAZALEH. « SpecCFI : Mitigating Spectre Attacks using CFI Informed Speculation ». In : *2020 IEEE Symposium on Security and Privacy (SP)*. Los Alamitos, CA, USA : IEEE Computer Society, mai 2020, p. 39-53. DOI : 10.1109/SP40000.2020.00033. URL : https://doi.ieeecomputersociety.org/10.1109/SP40000.2020.00033 (page 60).

[345] *What Spectre and Meltdown Mean For WebKit*. 2018. URL: What%20Spectre%20and%20Meltdown%20Mean%20For%20WebKit (page 60).

[346] Chandler CARRUTH. *Speculative Load Hardening*. URL: https://llvm.org/docs/SpeculativeLoadHardening.html (page 60).

[347] Khaled N. KHASAWNEH, Esmaeil Mohammadian KORUYEH, Chengyu SONG, Dmitry EVTYUSHKIN, Dmitry PONOMAREV et Nael ABU-GHAZALEH. « SafeSpec : Banishing the Spectre of a Meltdown with Leakage-Free Speculation ». In : *Proceedings of the 56th Annual Design Automation Conference 2019*. DAC '19. Las Vegas, NV, USA : Association for Computing Machinery, 2019. ISBN : 9781450367257. DOI : 10.1145/3316781.3317903. URL : https://doi.org/10.1145/3316781.3317903 (page 60).
[348] Mengjia YAN, Jiho CHOI, Dimitrios SKARLATOS, Adam MORRISON, Christopher W. FLETCHER et Josep TORRELLAS. « InvisiSpec : Making Speculative Execution Invisible in the Cache Hierarchy ». In : MICRO-51. Fukuoka, Japan : IEEE Press, 2018, p. 428-441. ISBN : 9781538662403. DOI : 10.1109/MICRO.2018.00042. URL : https://doi.org/10.1109/MICRO.2018.00042 (page 60).

[349] Zelalem Birhanu AWEKE, Salessawi Ferede YITBAREK, Rui QIAO, Reetuparna DAS, Matthew HICKS, Yossi OREN et Todd AUSTIN. « ANVIL : Software-Based Protection Against Next-Generation Rowhammer Attacks ». In : *Proceedings of the Twenty-First International Conference on Architectural Support for Programming Languages and Operating Systems*. ASPLOS '16. Atlanta, Georgia, USA : Association for Computing Machinery, 2016, p. 743-755. ISBN : 9781450340915. DOI : 10.1145/2872362.2872390. URL : https://doi.org/10.1145/2872362.2872390 (page 60).

[350] Ferdinand BRASSER, Lucas DAVI, David GENS, Christopher LIEBCHEN et Ahmad-Reza SADEGHI. « CAn't Touch This : Software-only Mitigation against Rowhammer Attacks targeting Kernel Memory ». In : *26th USENIX Security Symposium (USENIX Security 17)*. Vancouver, BC : USENIX Association, août 2017, p. 117-130. ISBN : 978-1-931971-40-9. URL : https://www.usenix.org/conference/usenixsecurity17/technical-sessions/presentation/brasser (page 60).

[351] Radhesh Krishnan KONOTH, Marco OLIVERIO, Andrei TATAR, Dennis ANDRIESSE, Herbert BOS, Cristiano GIUFFRIDA et Kaveh RAZAVI. « ZebRAM : Comprehensive and Compatible Software Protection Against Rowhammer Attacks ». In : *OSDI*. Oct. 2018. URL : Paper=https://download.vusec.net/papers/zebram_osdi18.pdf%20Code=https://github.com/vusec/zebram (page 60).

[352] Victor van der VEEN, Martina LINDORFER, Yanick FRATANTONIO, Harikrishnan PADMANABHA PILLAI, Giovanni VIGNA, Christopher KRUEGEL, Herbert BOS et Kaveh RAZAVI. « GuardION : Practical Mitigation of DMA-based Rowhammer Attacks on ARM ». In : *DIMVA*. Pwnie Award Nomination for Best Privilege Escalation Bug. Juin 2018. URL : Paper=https://vvdveen.com/publications/dimva2018.pdf%20Web=https://rampageattack.com%20Code=https://github.com/vusec/guardion%20Press=https://bit.ly/2H6QhqX (page 60).

[353] Z. ZHANG, Z. ZHAN, D. BALASUBRAMANIAN, B. LI, P. VOLGYESI et X. KOUTSOUKOS. « Leveraging EM Side-Channel Information to Detect Rowhammer Attacks ». In : *2020 IEEE Symposium on Security and Privacy (SP)*. Los Alamitos, CA, USA : IEEE Computer Society, mai 2020, p. 729-746. DOI : 10.1109/SP40000.2020.00060. URL : https://doi.ieeecomputersociety.org/10.1109/SP40000.2020.00060 (page 60).

[354] Morello – Arm Developer. 2020. URL : https://developer arm.com/architectures/cpu-architecture/a-profile/morello (page 68).

[355] Nicolas JOLY, Saif ELSHEREI et Saar AMAR. *Security Analysis of CHERI ISA*. Microsoft Security Response Center. 2020. URL : https://msrc-blog.microsoft.com/2020/10/14/security-analysis-of-cheri-isa/ (page 68).

[356] Robert N. M. WATSON. *CHERI : The Digital Security by Design (DSbD) Initiative*. 2019. URL : https://www.cl.cam.ac.uk/research/security/ctsrd/cheri/cheri-morello.html (page 68).

[357] Hafnium – opensource.google. Google. URL : https://opensource.google/projects/hafnium (page 68).
[348] Mengjia YAN, Jiho CHOI, Dimitrios SKARLATOS, Adam MORRISON, Christopher W. FLETCHER et Josep TORRELLAS. « InvisiSpec : Making Speculative Execution Invisible in the Cache Hierarchy ». In : MICRO-51. Fukuoka, Japan : IEEE Press, 2018, p. 428-441. ISBN : 9781538662403. DOI : 10.1109/MICRO.2018.00042. URL : https://doi.org/10.1109/MICRO.2018.00042 (page 60).

[349] Zelalem Birhanu AWEKE, Salessawi Ferede YITBAREK, Rui QIAO, Reetuparna DAS, Matthew HICKS, Yossi OREN et Todd AUSTIN. « ANVIL : Software-Based Protection Against Next-Generation Rowhammer Attacks ». In : *Proceedings of the Twenty-First International Conference on Architectural Support for Programming Languages and Operating Systems*. ASPLOS '16. Atlanta, Georgia, USA : Association for Computing Machinery, 2016, p. 743-755. ISBN : 9781450340915. DOI : 10.1145/2872362.2872390. URL : https://doi.org/10.1145/2872362.2872390 (page 60).

[350] Ferdinand BRASSER, Lucas DAVI, David GENS, Christopher LIEBCHEN et Ahmad-Reza SADEGHI. « CAn't Touch This : Software-only Mitigation against Rowhammer Attacks targeting Kernel Memory ». In : *26th USENIX Security Symposium (USENIX Security 17)*. Vancouver, BC : USENIX Association, août 2017, p. 117-130. ISBN : 978-1-931971-40-9. URL : https://www.usenix.org/conference/usenixsecurity17/technical-sessions/presentation/brasser (page 60).

[351] Radhesh Krishnan KONOTH, Marco OLIVERIO, Andrei TATAR, Dennis ANDRIESSE, Herbert BOS, Cristiano GIUFFRIDA et Kaveh RAZAVI. « ZebRAM : Comprehensive and Compatible Software Protection Against Rowhammer Attacks ». In : *OSDI*. Oct. 2018. URL : Paper=https://download.vusec.net/papers/zebram_osdi18.pdf%20Code=https://github.com/vusec/zebram (page 60).

[352] Victor van der VEEN, Martina LINDORFER, Yanick FRATANTONIO, Harikrishnan PADMANABHA PILLAI, Giovanni VIGNA, Christopher KRUEGEL, Herbert BOS et Kaveh RAZAVI. « GuardION : Practical Mitigation of DMA-based Rowhammer Attacks on ARM ». In : *DIMVA*. Pwnie Award Nomination for Best Privilege Escalation Bug. Juin 2018. URL : Paper=https://vvdveen.com/publications/dimva2018.pdf%20Web=https://rampageattack.com%20Code=https://github.com/vusec/guardion%20Press=https://bit.ly/2H6QhqX (page 60).

[353] Z. ZHANG, Z. ZHAN, D. BALASUBRAMANIAN, B. LI, P. VOLGYESI et X. KOUTSOUKOS. « Leveraging EM Side-Channel Information to Detect Rowhammer Attacks ». In : *2020 IEEE Symposium on Security and Privacy (SP)*. Los Alamitos, CA, USA : IEEE Computer Society, mai 2020, p. 729-746. DOI : 10.1109/SP40000.2020.00060. URL : https://doi.ieeecomputersociety.org/10.1109/SP40000.2020.00060 (page 60).

[354] Morello – Arm Developer. 2020. URL : https://developer arm.com/architectures/cpu-architecture/a-profile/morello (page 68).

[355] Nicolas JOLY, Saif ELSHEREI et Saar AMAR. *Security Analysis of CHERI ISA*. Microsoft Security Response Center. 2020. URL : https://msrc-blog.microsoft.com/2020/10/14/security-analysis-of-cheri-isa/ (page 68).

[356] Robert N. M. WATSON. *CHERI : The Digital Security by Design (DSbD) Initiative*. 2019. URL : https://www.cl.cam.ac.uk/research/security/ctsrd/cheri/cheri-morello.html (page 68).

[357] Hafnium – opensource.google. Google. URL : https://opensource.google/projects/hafnium (page 68).
[358] *Morello Platform Open Source Software - Morello Project.* Linaro. 2020. URL : https://www.morello-project.org/ (page 68).
[358] *Morello Platform Open Source Software - Morello Project.* Linaro. 2020. URL : https://www.morello-project.org/ (page 68).