Where does security stand? New vulnerabilities vs. trusted computing

IEEE Micro

Volumn 27, Issue 6, 2007, Pages 25-35

  Gueron, Shay ^a   Seifert, Jean Pierre ^b   Strongin, Geoffrey ^c   Chiou, Derek ^d   Sendag, Resit ^e   Yi, Joshua J ^f  

^a UNIVERSITY OF HAIFA   (Israel)

^b ADVANCED MICRO DEVICES   (United States)

^c UNIVERSITY OF INNSBRUCK   (Austria)

^d UNIVERSITY OF TEXAS AT AUSTIN   (United States)

^e UNIVERSITY OF RHODE ISLAND   (United States)

^f FREESCALE SEMICONDUCTOR INC   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER HARDWARE; COMPUTER SOFTWARE; FIRMWARE; SECURITY OF DATA;

COMPUTER ARCHITECTURAL INNOVATIONS; SECURITY VULNERABILITIES;

COMPUTER ARCHITECTURE;

EID: 39849091652     PISSN: 02721732     EISSN: None     Source Type: Journal    
DOI: 10.1109/MM.2007.112     Document Type: Article

References (6)

1. O. Aciiçmez, C.K. Koç, and J.-P. Seifert, "On the Power of Simple Branch Prediction Analysis," Proc. ACM Symp. Information, Computer and Communications Security (ASIACCS 07), ACM Press, 2007, pp. 312-320 (also available in the Cryptology ePrint Archive, Report 2006/351, Oct. 2006; http://eprint.iacr.org/2006/351).
2. O. Aciiçmez, S. Gueron, and J.-P. Seifert, "New Branch Prediction Vulnerabilities in OpenSSL and Necessary Software Countermeasures," to appear in Proc. 11th IMA Int'l Conf. on Cryptography and Coding, LNCS 4887, Springer (also available at Cryptology ePrint Archive, Report 2007/039, Feb. 2007; http://eprint.iacr.org/2007/039).
3. S. Gueron and J.-P. Seifert, "On the Impossibility to Detect Virtualization," unpublished manuscript, Aug. 2007 (available from S. Gueron, shayμath.technion.ac.il; or J.-P. Seifert, seifertμi.informatik.uni-frankfurt.de).
4. B.W. Lampson, "A Note on the Confinement Problem," Comm. ACM, vol. 16, no. 10, Oct. 1973, pp. 613-615.
5. C. Percival, "Cache Missing for Fun and Profit," 2005; http://www.daemonology.net/papers/htt.pdf.
6. O. Aciiçmez, J.-P. Seifert, and C. Koç, "Micro-Architectural Cryptanalysis," IEEE Trans. Security and Privacy, vol. 5, no. 4, Jul.-Aug. 2007, pp. 62-64.