How to Live in a Post-Meltdown and -Spectre World-Reference-Cited by-同舟云学术

How to Live in a Post-Meltdown and -Spectre World

Published:2018-08 Issue:4 Volume:16 Page:18-30
ISSN:1542-7730
Container-title:Queue
language:en
Short-container-title:Queue

Author:

Bennett Rich¹,Callahan Craig¹,Jones Stacy¹,Levine Matt¹,Miller Merrill¹,Ozment Andy¹

Affiliation:

1. Goldman Sachs

Abstract

Spectre and Meltdown create a risk landscape that has more questions than answers. This article addresses how these vulnerabilities were triaged when they were announced and the practical defenses that are available. Ultimately, these vulnerabilities present a unique set of circumstances, but for the vulnerability management program at Goldman Sachs, the response was just another day at the office.

Publisher

Association for Computing Machinery (ACM)

Subject

General Computer Science

Link

https://dl.acm.org/doi/pdf/10.1145/3277539.3281471

Reference3 articles.

1. Aleph One. 1996. Smashing the stack for fun and profit. Phrack 49(7); http://phrack.org/issues/49/14.html#article. Aleph One. 1996. Smashing the stack for fun and profit. Phrack 49(7); http://phrack.org/issues/49/14.html#article.

2. Siron E. 2018. The actual performance impact of Spectre/Meltdown Hyper-V updates. Hyper-V Blog; https://www.altaro.com/hyper-v/meltdown-spectre-hyperv-performance/. Siron E. 2018. The actual performance impact of Spectre/Meltdown Hyper-V updates. Hyper-V Blog; https://www.altaro.com/hyper-v/meltdown-spectre-hyperv-performance/.

3. Trippel C. Lustig D. Martonosi M. 2018. Meltdown Prime and Spectre Prime: automatically synthesized attacks exploiting invalidation-based coherence protocols. https://arxiv.org/abs/1802.03802. Trippel C. Lustig D. Martonosi M. 2018. Meltdown Prime and Spectre Prime: automatically synthesized attacks exploiting invalidation-based coherence protocols. https://arxiv.org/abs/1802.03802.

Cited by 1 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. MeltdownDetector: A runtime approach for detecting meltdown attacks;Future Generation Computer Systems;2020-11