Are Microarchitectural Attacks still possible on ...

on YouTube ↗42m

" summary

Overview of current microarchitectural side-channel attacks and defenses, then a thought experiment imagining CPUs that eliminate hardware side effects. Demonstrates methods to recreate well-known microarchitectural attacks purely in software—shifting hardware-dependent primitives to software-only techniques—that work across Windows, Linux, Android and on both x86 and ARM.

AI-written summary · about

" chapters (10)

1. 0:00Intro
2. 1:55Architecture and Microarchitecture
3. 8:48Measured Trace
4. 11:26Meltdown Tree
5. 14:42Operating System and CPU Microarchitecture
6. 20:17Observe Page Cache State
7. 24:08Eviction Linux
8. 26:52Eviction Windows
9. 31:25PHP RNG Attack
10. 38:47Countermeasures - Windows

" related talks

• 01h 01mTutorial: Side-Channel Attacks and Transient Execution Vulnerab...Allison Randal, Giorgos Christou · RISC-V Summit 2022
• 51mKeynote |The Microarchitectures That I Saw And The Ones That I Hope To One Day SeeRodrigo Rubira Branco · Hardwear.io USA 2023
• 41mHand Me Your SECRET, MCU! Microarchitectural Timing Attacks on Microcontrollers are PracticalSandro Pinto, Cristiano Rodrigues · Black Hat Asia 2023
• 46mRethinking Architectures and Abstraction for a World Where Security Improvements Matter More than Performance GainsPaul Kocher · USENIX Security '18
• 51mExploiting Hardware Glitches And Side Channels In Perfect SoftwareHerbert Bos · OWASP Global AppSec Amsterdam 2019
• 35mPage Cache Attacks: Microarchitectural Attacks on Flawless HardwareDaniel Gruss, Michael Schwarz, Erik Kraft, Trishita Tiwari · Black Hat Asia 2020
• 41mUsing Microarchitectural Design to Break KASLR and MoreAnders Fogh · RuhrSec 2017
• 36mIt will slip by, or about Side ChannelsMateusz Chrobok · Oh My Hack 2024