Stealing webpages rendered on your browser by exploiting GPU vulnerabilities

Proceedings - IEEE Symposium on Security and Privacy

Volumn , Issue , 2014, Pages 19-33

  Lee, Sangho ^a   Kim, Youngsok ^a   Kim, Jangwoo ^a   Kim, Jong ^a  

^a Pohang University of Science and Technology (POSTECH)   (South Korea)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER GRAPHICS EQUIPMENT; GRAPHICS PROCESSING UNIT; PROGRAM PROCESSORS; TEXTURES; WEB BROWSERS; WEBSITES;

COMPUTING DEVICES; FIREFOX WEB BROWSER; GRAPHICS RENDERING; HISTOGRAM MATCHING; PARALLEL COMPUTATION; SECURITY ANALYSIS; SECURITY PROBLEMS; SECURITY VULNERABILITIES;

RENDERING (COMPUTER GRAPHICS);

EID: 84914100506     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SP.2014.9     Document Type: Conference Paper

References (39)

1. NVIDIA, "NVIDIA's next generation CUDA compute architecture: Kepler GK110," 2012.
2. -. CUDA C programming guide version 5.5. http://docs. nvidia.com/cuda/cuda-c-programming-guide/.
3. Microsoft, "DirectX graphics and gaming," http://msdn.microsoft.com/en-us/library/windows/desktop/ee663274(v=vs.85).aspx.
4. D. Shreiner, G. Sellers, J. M. Kessenich, and B. M. Licea-Kane, Open GL Programming Guide: The Official Guide to Leaning Open GL. Addison Wesley, 2013.
5. B. Gaster, L. Howes, D. R. Kaeli, P. Mistry, and D. Schaa, Heterogeneous Computing with OpenCL. Morgan Kaufmann, 2012.
6. NVIDIA, "Tesla supercomputing HPC industrical case studies," http://www.nvidia.com/object/tesla-case-studies.html.
7. P. Bakkum and K. Skadron, "Accelerating SQL database operations on a GPU with CUDA," in Proceedings of the 3rd Workshop on General-Purpose Computation on Graphics Processing Units (GPGPU), 2010.
8. H. Wu, G. Diamos, S. Cadambi, and S. Yalamanchili, "Kernel weaver: Automatically fusing database primitives for efficient GPU computation," in Proceedings of the 45th Annual IEEE/ACM International Symposium on Microarchitecture (MICRO), 2012.
9. S. Han, K. Jang, K. Park, and S. Moon, "Packet Shader: a GPU-accelerated software router," in Proceedings of the ACM SIGCOMM 2010 Conference, 2010.
10. G. Vasiliadis, M. Polychronakis, and S. Ioannidis, "MIDeA: A multi-parallel intrusion detection architecture," in Proceedings of the 18th ACM Conference on Computer and Communications Security (CCS), 2011.
11. M. Jamshed, J. Lee, S. Moon, I. Yun, D. Kim, S. Lee, Y. Yi, and K. Park, "Kargus: a highly-scalable softwarebased intrusion detection system," in Proceedings of the 19th ACM Conference on Computer and Communications Security (CCS), 2012.
12. K. Jang, S. Han, S. Han, S. Moon, and K. Park, "SSLShader: Cheap SSL acceleration with commodity processors," in Proceedings of the 8th USENIX Symposium on Networked Systems Design and Implementation (NSDI), 2011.
13. D. L. Cook, J. Ioannidis, A. D. Keromytis, and J. Luck, "Crypto Graphics: Secret key cryptography using graphics cards," in Proceedings of The Cryptographer's Track at RSA Conference 2005 (CT-RSA), 2005.
14. J. Yang and J. Goodman, "Symmetric key cryptography on modern graphics hardware," in Proceedings of the 13th International Conference on the Theory and Application of Cryptology and Information Security (ASIACRYPT), 2007.
15. O. Harrison and J. Waldron, "Practical symmetric key cryptography on modern graphics hardware," in Proceedings of the 17th USENIX Security Symposium, 2008.
16. -, "Efficient acceleration of asymmetric cryptography on graphics hardware," in Proceedings of the 2nd International Conference on Cryptology in Africa (AFRICACRYPT), 2009.
17. R. Szerwinski and T. Güneysu, "Exploiting the power of GPUs for asymmetric cryptography," in Proceedings of the 10th Workshop on Cryptographic Hardware and Embedded Systems (CHES), 2008.
18. J. T. Adriaens, K. Compton, N. S. Kim, and M. J. Schulte, "The case for GPGPU spatial multitasking," in Proceedings of the 18th IEEE International Conference on High Performance Computer Architecture (HPCA), 2012.
19. Virtual GL. The Virtual GL project. http://www.virtualgl.org.
20. Khronos, "WebGL security," http://www.khronos.org/webgl/security/.
21. J. Chow, B. Pfaff, T. Garfinkel, and M. Rosenblum, "Shredding your garbage: Reducing data lifetime through secure deallocation," in Proceedings of the 14th USENIX Security Symposium, 2005.
22. J. Chow, B. Pfaff, T. Garfinkel, K. Christopher, and M. Rosenblum, "Understanding data lifetime via whole system simulation," in Proceedings of the 13th USENIX Security Symposium, 2004.
23. T. Garfinkel, B. Pfaff, J. Chow, and M. Rosenblum, "Data lifetime is a system problem," in Proceedings of the 11th ACM SIGOPS European Workshop, 2004.
24. A. M. Dunn, M. Z. Lee, S. Jana, S. Kim, M. Silberstein, Y. Xu, V. Shmatikov, and E. Witchel, "Eternal sunshine of the spotless machine: Protecting privacy with ephemeral channels," in Proceedings of the 10th USENIX Symposium on Operating Systems Design and Implementation (OSDI), 2012.
25. R. Di Pietro, F. Lombardi, and A. Villani, "CUDA leaks: Information leakage in GPU architectures," ArXiv e-prints, 2013.
26. C. Maurice, C. Neumann, O. Heen, and A. Francillon, "Confidentiality issues on a GPU in a virtualized environment," in Proceedings of the 18th International Conference on Financial Cryptography and Data Security (FC), 2014.
27. R. Love, Linux Kernel Development. Addison Wesley, 2010.
28. S. Jana and V. Shmatikov, "Memento: Learning secrets from process footprints," in Proceedings of the 33rd IEEE Symposium on Security and Privacy (Oakland), 2012.
29. K. Zhang and X. Wang, "Peeping tom in the neighborhood: Keystroke eavesdropping on multi-user systems," in Proceedings of the 18th USENIX Security Symposium, 2009.
30. R. Meltzer, C. Zeng, and C. Cecka, "Micro-benchmarking the C2070," in GPU Technology Conference, 2013.
31. E. Bingham and H. Mannila, "Random projection in dimensionality reduction: Applications to image and text data," in Proceedings of the 17th ACM SIGKDD Conference on Knowledge Discovery and Data Mining (KDD), 2001.
32. A. Hidayat. Phantom JS: Headless Web Kit with Java Script API. http://phantomjs.org.
33. NVIDIA, "NVIDIA's next generation CUDA compute architecture: Fermi," 2009.
34. R. Kotcher, Y. Pei, P. Jumde, and C. Jackson, "Crossorigin pixel stealing: Timing attack using CSS filters," in Proceedings of the 20th ACM Conference on Computer and Communications Security (CCS), 2013.
35. P. Stone, "Pixel perfect timing attacks with HTML5," in Blackhat USA, 2013.
36. A. Barth, "Adam barth's proposal," http://www.schemehostport.com/2011/12/timing-attack-on-css-shaders.html.
37. D. Goodin, "25-GPU cluster cracks every standard Windows password in <6 hours."
38. G. Vasiliadis, M. Polychronakis, and S. Ioannidis, "GPUassisted malware," in Proceedings of the 5th International Conference on Malicious and Unwanted Software (Malware), 2010.
39. E. Ladakis, L. Koromilas, G. Vasiliadis, M. Polychronakis, and S. Ioannidis, "You can type, but you can't hide: A stealthy GPU-based keylogger," in Proceedings of the 6th European Workshop on System Security (EuroSec), 2013.