Vulnerabilità di sicurezza legate all'esecuzione speculativa e "out-of-order"
Creators: name: Netti, Davide
Publisher: name: Zenodo
Year: 2022
Subjects: Meltdown
Spectre
out of order execution
speculative execution
review of modern architectures

description: Bachelor Degree Dissertation supervised by Giovanni Manzini. In-depth study about Meltdown and Spectre vulnerabilities and review of modern computer architectures.
description: {"references": ["[1] Andrew S. Tanenbaum and Todd Austin. Structured Computer Organization. Pearson, 2013 (sixth edition).", "[2] John Von Neumann. First Draft of a Report on the EDVAC. IEEE Ann. Hist. Comput., 15(4):27-75, 1993.", "[3] Marr, Deborah T., et al. Hyper-Threading Technology Architecture and Microarchitecture. Intel Technology Journal, 6(1), 2002.", "[4] D. M. Tullsen, S. J. Eggers and H. M. Levy. Simultaneous multithreading: Maximizing on- chip parallelism. Proceedings 22nd Annual International Symposium on Computer Architecture, Santa Margherita Ligure, Italy, 1995, 392-403.", "[5] Mike Johnson, Superscalar Microprocessor Design, Prentice-Hall, 1991.", "[6] Saini, S., Jin, H., Hood, R., Barker, D., Mehrotra, P., &amp; Biswas, R. The impact of hyper- threading on processor resource utilization in production applications. IEEE, 18th International Conference on High Performance Computing 1-10, 2011.", "[7] Tom's Hardware. Patrick Schmid. The Pentium D: Intel's Dual Core Silver Bullet Previewed. https://www.tomshardware.com/reviews/pentium-d,1006-3.html. Ultimo accesso: 4 Aprile 2021.", "[8] M. J. Flynn. Some Computer Organizations and Their Effectiveness. IEEE Transactions on Computers. C-21(9):948-960, 1972.", "[9] Moritz Lipp and Michael Schwarz and Daniel Gruss and Thomas Prescher and Werner Haas and Anders Fogh and Jann Horn and Stefan Mangard and Paul Kocher and Daniel Genkin and Yuval Yarom and Mike Hamburg. Meltdown: Reading Kernel Memory from User Space. 27th USENIX Security Symposium, 2018.", "[10] NIST. https://nvd.nist.gov/vuln/detail/CVE-2017-5754. Ultimo accesso: 4 Aprile 2021.", "[11] Yarom Yuval and Falkner Katrina. FLUSH+ RELOAD: A high resolution, low noise, L3 cache side-channel attack. 23rd USENIX Security Symposium, 2014. 719-732.", "[12] \"Change list\" del kernel Linux in versione 3.14. https://kernelnewbies.org/ Linux_3.14#head-192cae48200fccde67b36c75cdb6c6d8214cccb. Ultimo accesso: 6 Aprile 2021.", "[13] Jake Edge. Kernel address space layout randomization, 2013. https://lwn.net/Articles/ 569635. Ultimo accesso: 6 Aprile 2021.", "[14] Daniel Gruss et al. Kaslr is dead: long live kaslr. International Symposium on Engineering Secure Software and Systems. Springer, 161-176. 2017.", "[15] Jonathan Corbet. KAISER: hiding the kernel from user space. https://lwn.net/Articles/ 738975/, 2017.", "[16] Pagina informativa Microsoft Windows riguardo le vulnerabilit\u00e0 Meltdown e Spectre. https://support.microsoft.com/en-us/topic/protect-your-windows-devices-against- speculative-execution-side-channel-attacks-a0b9f66c-f426-d854-fdbb-0e6beaeeee87. Ultimo accesso: 6 Aprile 2021.", "[17] Pagina informativa Apple riguardo le vulnerabilit\u00e0 Meltdown e Spectre nei suoi sistemi operativi (iOS, MacOS, WatchOS, iPadOS). https://support.apple.com/it-it/ HT208394. Ultimo accesso: 6 Aprile 2021.", "[18] Pagina informativa ARM riguardo vulnerabilit\u00e0 Meltdown e Spectre. https:// developer.arm.com/support/arm-security-updates/speculative-processor- vulnerability. Ultimo accesso: 6 Aprile 2021.", "[19] Pagina informativa AMD riguardo alle vulnerabilit\u00e0 rilevate sui suoi prodotti. https:// www.amd.com/en/corporate/product-security. Ultimo accesso: 6 Aprile 2021.", "[20] Jonathan Cobet. The current state of kernel page-table isolation. 2017. https://lwn.net/ Articles/741878/. Ultimo accesso: 6 Aprile 2021.", "[21] Paul Kocher and Jann Horn and Anders Fogh and and Daniel Genkin and Daniel Gruss and Werner Haas and Mike Hamburg and Moritz Lipp and Stefan Mangard and Thomas Prescher and Michael Schwarz and Yuval Yarom. Spectre Attacks: Exploiting Speculative Execution. IEEE Symposium on Security and Privacy:1-19, 2019.", "[22] Perleberg, Chris H., and Alan Jay Smith. Branch target buffer design and optimization. IEEE transactions on computers 42(4):396-412, 1993.", "[23] Roemer, Ryan, et al. Return-oriented programming: Systems, languages, and applications. ACM Transactions on Information and System Security (TISSEC) 15(1):1-34, 2012.", "[24] Liu, Fangfei, et al. Last-level cache side-channel attacks are practical. IEEE symposium on security and privacy:605-622, 2015.", "[25] Repository GitHub da cui \u00e8 stata derivata la Proof Of Concept. https://github.com/ Markus-MS/Spectre-Attack. Ultimo accesso: 7 Aprile 2021."]}