Presentation
Unveiling the Security Risks Driven by the Hardware Interrupts
DescriptionThe interrupt is a significant mechanism for computer systems to schedule hardware resources. We find that some hardware interrupts are not well-managed so that they can expose low-level events to unprivileged software, which introduce unanticipated security risks.
We first design an automated testing framework to identify the interrupts' working features and trigger condition, which helps us discover six vulnerable interrupts. Next, we design a novel set of attack primitives for leaking secrets using them. Finally, we realize four attacks with the proposed attack primitives: leaking contents from a restricted directory, fingerprinting DNN model architectures, classifying processes, and enhancing Spectre attacks.
We first design an automated testing framework to identify the interrupts' working features and trigger condition, which helps us discover six vulnerable interrupts. Next, we design a novel set of attack primitives for leaking secrets using them. Finally, we realize four attacks with the proposed attack primitives: leaking contents from a restricted directory, fingerprinting DNN model architectures, classifying processes, and enhancing Spectre attacks.
Event Type
Research Manuscript
TimeTuesday, July 285:18pm - 5:30pm PDT
LocationMtg Room 203C
Similar Presentations