{"id":"https://openalex.org/W4393406863","doi":"https://doi.org/10.1109/hpca57654.2024.00014","title":"Uncovering and Exploiting AMD Speculative Memory Access Predictors for Fun and Profit","display_name":"Uncovering and Exploiting AMD Speculative Memory Access Predictors for Fun and Profit","publication_year":2024,"publication_date":"2024-03-02","ids":{"openalex":"https://openalex.org/W4393406863","doi":"https://doi.org/10.1109/hpca57654.2024.00014"},"language":"en","primary_location":{"id":"doi:10.1109/hpca57654.2024.00014","is_oa":false,"landing_page_url":"https://doi.org/10.1109/hpca57654.2024.00014","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE International Symposium on High-Performance Computer Architecture (HPCA)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5029920838","display_name":"Chang Liu","orcid":"https://orcid.org/0000-0001-8075-538X"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chang Liu","raw_affiliation_strings":["Tsinghua University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100450575","display_name":"Dongsheng Wang","orcid":"https://orcid.org/0000-0001-5779-9026"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dongsheng Wang","raw_affiliation_strings":["Tsinghua University","Zhongguancun Laboratory"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Zhongguancun Laboratory","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058507537","display_name":"Yongqiang Lyu","orcid":"https://orcid.org/0000-0003-2573-963X"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yongqiang Lyu","raw_affiliation_strings":["Tsinghua University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tsinghua University","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003865038","display_name":"Pengfei Qiu","orcid":"https://orcid.org/0009-0009-4043-2119"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Pengfei Qiu","raw_affiliation_strings":["Beijing University of Posts and Telecommunications"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102072396","display_name":"Jin Yu","orcid":null},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu Jin","raw_affiliation_strings":["Beijing University of Posts and Telecommunications"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5104329988","display_name":"Zhuoyuan Lu","orcid":null},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhuoyuan Lu","raw_affiliation_strings":["Beijing University of Posts and Telecommunications"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing University of Posts and Telecommunications","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070946957","display_name":"Yinqian Zhang","orcid":"https://orcid.org/0000-0002-7585-1075"},"institutions":[{"id":"https://openalex.org/I3045169105","display_name":"Southern University of Science and Technology","ror":"https://ror.org/049tv2d57","country_code":"CN","type":"education","lineage":["https://openalex.org/I3045169105"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yinqian Zhang","raw_affiliation_strings":["Southern University of Science and Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Southern University of Science and Technology","institution_ids":["https://openalex.org/I3045169105"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5012474783","display_name":"Gang Qu","orcid":"https://orcid.org/0000-0001-6759-8949"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gang Qu","raw_affiliation_strings":["University of Maryland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Maryland","institution_ids":["https://openalex.org/I66946132"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"31","last_page":"45"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10054","display_name":"Parallel Computing and Optimization Techniques","score":0.9950000047683716,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10054","display_name":"Parallel Computing and Optimization Techniques","score":0.9950000047683716,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11181","display_name":"Advanced Data Storage Technologies","score":0.9944000244140625,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12808","display_name":"Ferroelectric and Negative Capacitance Devices","score":0.9821000099182129,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6160185933113098},{"id":"https://openalex.org/keywords/random-access-memory","display_name":"Random access memory","score":0.5450135469436646},{"id":"https://openalex.org/keywords/profit","display_name":"Profit (economics)","score":0.4483720064163208},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.3276849389076233},{"id":"https://openalex.org/keywords/economics","display_name":"Economics","score":0.2099851667881012},{"id":"https://openalex.org/keywords/microeconomics","display_name":"Microeconomics","score":0.18003922700881958},{"id":"https://openalex.org/keywords/computer-hardware","display_name":"Computer hardware","score":0.08707800507545471}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6160185933113098},{"id":"https://openalex.org/C2994168587","wikidata":"https://www.wikidata.org/wiki/Q5295","display_name":"Random access memory","level":2,"score":0.5450135469436646},{"id":"https://openalex.org/C181622380","wikidata":"https://www.wikidata.org/wiki/Q26911","display_name":"Profit (economics)","level":2,"score":0.4483720064163208},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3276849389076233},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.2099851667881012},{"id":"https://openalex.org/C175444787","wikidata":"https://www.wikidata.org/wiki/Q39072","display_name":"Microeconomics","level":1,"score":0.18003922700881958},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.08707800507545471}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/hpca57654.2024.00014","is_oa":false,"landing_page_url":"https://doi.org/10.1109/hpca57654.2024.00014","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE International Symposium on High-Performance Computer Architecture (HPCA)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3477364470","display_name":null,"funder_award_id":"2021YFB3100902","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"}],"funders":[{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":39,"referenced_works":["https://openalex.org/W2128255161","https://openalex.org/W2137453738","https://openalex.org/W2163563130","https://openalex.org/W2170585292","https://openalex.org/W2791034507","https://openalex.org/W2884163605","https://openalex.org/W2903035991","https://openalex.org/W2954241526","https://openalex.org/W2963311060","https://openalex.org/W2976763854","https://openalex.org/W2982848142","https://openalex.org/W3015844221","https://openalex.org/W3047462776","https://openalex.org/W3112409568","https://openalex.org/W3145598683","https://openalex.org/W3152901657","https://openalex.org/W3153564332","https://openalex.org/W3154521522","https://openalex.org/W3159715284","https://openalex.org/W3190597741","https://openalex.org/W3197795418","https://openalex.org/W3210462562","https://openalex.org/W3212058523","https://openalex.org/W4200623403","https://openalex.org/W4246977929","https://openalex.org/W4288086178","https://openalex.org/W4293262008","https://openalex.org/W4318541606","https://openalex.org/W4385080289","https://openalex.org/W4386764061","https://openalex.org/W6628261430","https://openalex.org/W6753443810","https://openalex.org/W6754306559","https://openalex.org/W6756740455","https://openalex.org/W6772375945","https://openalex.org/W6801391798","https://openalex.org/W6844350296","https://openalex.org/W6940342628","https://openalex.org/W7071262805"],"related_works":["https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W2382290278","https://openalex.org/W2478288626","https://openalex.org/W4391913857","https://openalex.org/W2350741829","https://openalex.org/W2530322880"],"abstract_inverted_index":{"This":[0],"paper":[1],"presents":[2],"a":[3],"comprehensive":[4],"investigation":[5],"into":[6],"the":[7,31,38,115,121],"security":[8,76],"vulnerabilities":[9],"associated":[10],"with":[11,45],"speculative":[12],"memory":[13],"access":[14],"on":[15],"AMD":[16],"processors.":[17],"Firstly,":[18],"employing":[19],"novel":[20],"reverse":[21],"engineering":[22],"techniques,":[23],"our":[24,55],"study":[25],"uncovers":[26],"two":[27],"key":[28],"predictors,":[29,87],"namely":[30],"Predictive":[32],"Store":[33,40,111],"Forwarding":[34],"Predictor":[35,42],"(PSFP)":[36],"and":[37,50,66,94],"Speculative":[39,110],"Bypass":[41,112],"(SSBP),":[43],"along":[44],"elucidating":[46],"their":[47],"internal":[48],"structures":[49],"state":[51],"machine":[52],"designs.":[53],"Secondly,":[54],"research":[56],"empirically":[57],"confirms":[58],"that":[59,108],"these":[60,79,86],"predictors":[61],"can":[62],"be":[63],"deliberately":[64],"manipulated":[65],"altered":[67],"during":[68],"transient":[69],"execution,":[70],"resulting":[71],"in":[72],"secret":[73],"leakage":[74],"across":[75],"domains.":[77],"Leveraging":[78],"discoveries,":[80],"we":[81,105],"propose":[82],"innovative":[83],"attacks":[84],"targeting":[85],"including":[88],"an":[89,95],"out-of-place":[90],"variant":[91],"of":[92,99,123],"Spectre-STL":[93],"entirely":[96],"new":[97],"form":[98],"Spectre":[100],"attack":[101],"named":[102],"Spectre-CTL.":[103],"Finally,":[104],"establish":[106],"experimentally":[107],"enabling":[109],"Disable":[113],"alleviates":[114],"vulnerabilities.":[116],"However,":[117],"this":[118],"comes":[119],"at":[120],"expense":[122],"significant":[124],"performance":[125],"degradation.":[126]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":5}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}