Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

The Code That Never Ran - Modeling Attacks on Speculative Evaluation

IEEE via YouTube

Overview

Explore a 17-minute IEEE conference talk that delves into modeling attacks on speculative evaluation. Gain insights into the Spectre attack and its exploitation of dynamic security checks, speculative evaluation, and cache timing. Discover a proposed pomset-based model designed to capture speculative evaluation, which is abstract enough to express known attacks like Spectre and Prime+Abort while verifying their countermeasures. Learn about the model's potential to predict new information flow attacks, including two novel attacks exploiting compiler optimizations. Understand how these attacks were experimentally validated against gcc and clang, and grasp the importance of formal modeling in identifying and mitigating security vulnerabilities in modern computer architectures.

Syllabus

The Code That Never Ran: Modeling Attacks on Speculative Evaluation

Taught by

IEEE Symposium on Security and Privacy

Reviews

Start your review of The Code That Never Ran - Modeling Attacks on Speculative Evaluation

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.