Pith. sign in

REVIEW

Systematic Analysis of Programming Languages and Their Execution Environments for Spectre Attacks

Not yet reviewed by Pith; the record is open.

Re-run · record.json Download PDF Read on arXiv ↗

This paper has not been read by Pith yet. Machine review is queued; the pith claim, tier, and objections will appear here once it completes.

SPECIMEN: schema-true, not a live event

T0 review · schema-true

One-sentence machine reading of the paper's core claim.

pith:XXXXXXXX · record.json · timestamp

arxiv 2111.12528 v1 pith:KZPZ6YR7 submitted 2021-11-24 cs.CR

Systematic Analysis of Programming Languages and Their Execution Environments for Spectre Attacks

Amir Naseredini , Stefan Gast , Martin Schwarzl , Pedro Miguel Sousa Bernardo , Amel Smajic , Claudio Canella , Martin Berger , Daniel Gruss This is my paper
classification cs.CR
keywords spectreenvironmentsexecutionlanguagesprogrammingattacksanalysiscode
verification ladder T0 review T1 audit T2 compute T3 formal T4 reserved
0 comments
Share X Bluesky LinkedIn Reddit HN
read the original abstract

In this paper, we analyze the security of programming languages and their execution environments (compilers and interpreters) with respect to Spectre attacks. The analysis shows that only 16 out of 42 execution environments have mitigations against at least one Spectre variant, i.e., 26 have no mitigations against any Spectre variant. Using our novel tool Speconnector, we develop Spectre proof-of-concept attacks in 8 programming languages and on code generated by 11 execution environments that were previously not known to be affected. Our results highlight some programming languages that are used to implement security-critical code, but remain entirely unprotected, even three years after the discovery of Spectre.

discussion (0)

Sign in with ORCID, Apple, or X to comment. Anyone can read and Pith papers without signing in.