Hardware-Accelerated Parallel Wrong-Path Execution for Spectre Gadget Detection

IF 2 3区 计算机科学 Q4 COMPUTER SCIENCE, HARDWARE & ARCHITECTURE
IEEE Computer Architecture Letters Pub Date : 2026-01-01 Epub Date: 2026-06-04 DOI:10.1109/LCA.2026.3700174
Fangzheng Lin;Zeyu Gao;Yanru Lin;Yangyu Chen;Hiroshi Sasaki
{"title":"Hardware-Accelerated Parallel Wrong-Path Execution for Spectre Gadget Detection","authors":"Fangzheng Lin;Zeyu Gao;Yanru Lin;Yangyu Chen;Hiroshi Sasaki","doi":"10.1109/LCA.2026.3700174","DOIUrl":null,"url":null,"abstract":"Spectre vulnerabilities pose new threats to computer system security, and detecting Spectre gadgets is an important step toward effective countermeasures. Detection requires exploring program behavior along branch-mispredicted execution paths (i.e., wrong paths), which existing dynamic scanners emulate in software—incurring high overhead and limiting parallel exploration. This paper proposes a hardware-assisted dynamic gadget detection architecture that offloads wrong-path executions to a pool of in-order shadow cores on a specialized asymmetric multicore platform, enabling multiple paths to be explored in parallel. The design also features shadow memory versioning to preserve the memory view at the branch point without full memory duplication. We prototype the proposed architecture on an Xilinx VU13P FPGA. Evaluation shows that the prototype achieves 1.25–5.24 × speedup over software-based detectors.","PeriodicalId":51248,"journal":{"name":"IEEE Computer Architecture Letters","volume":"25 1","pages":"239-242"},"PeriodicalIF":2.0000,"publicationDate":"2026-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=11550758","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"IEEE Computer Architecture Letters","FirstCategoryId":"94","ListUrlMain":"https://ieeexplore.ieee.org/document/11550758/","RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"2026/6/4 0:00:00","PubModel":"Epub","JCR":"Q4","JCRName":"COMPUTER SCIENCE, HARDWARE & ARCHITECTURE","Score":null,"Total":0}
引用次数: 0

Abstract

Spectre vulnerabilities pose new threats to computer system security, and detecting Spectre gadgets is an important step toward effective countermeasures. Detection requires exploring program behavior along branch-mispredicted execution paths (i.e., wrong paths), which existing dynamic scanners emulate in software—incurring high overhead and limiting parallel exploration. This paper proposes a hardware-assisted dynamic gadget detection architecture that offloads wrong-path executions to a pool of in-order shadow cores on a specialized asymmetric multicore platform, enabling multiple paths to be explored in parallel. The design also features shadow memory versioning to preserve the memory view at the branch point without full memory duplication. We prototype the proposed architecture on an Xilinx VU13P FPGA. Evaluation shows that the prototype achieves 1.25–5.24 × speedup over software-based detectors.
用于幽灵小工具检测的硬件加速并行错误路径执行
Spectre漏洞对计算机系统安全构成了新的威胁,检测Spectre小工具是有效应对的重要一步。检测需要沿着分支——错误预测的执行路径(即错误的路径)探索程序行为,现有的动态扫描器在软件中模拟这些行为——导致高开销并限制并行探索。本文提出了一种硬件辅助的动态小部件检测体系结构,该体系结构将错误路径的执行卸载到专用的非对称多核平台上的有序影子核池中,使多条路径能够并行探索。该设计还具有影子内存版本控制功能,以保留分支点的内存视图,而不需要完全内存复制。我们在Xilinx VU13P FPGA上对所提出的架构进行了原型设计。评估表明,该原型比基于软件的检测器实现了1.25-5.24倍的加速。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
求助全文
约1分钟内获得全文 求助全文
来源期刊
IEEE Computer Architecture Letters
IEEE Computer Architecture Letters COMPUTER SCIENCE, HARDWARE & ARCHITECTURE-
CiteScore
4.60
自引率
4.30%
发文量
29
期刊介绍: IEEE Computer Architecture Letters is a rigorously peer-reviewed forum for publishing early, high-impact results in the areas of uni- and multiprocessor computer systems, computer architecture, microarchitecture, workload characterization, performance evaluation and simulation techniques, and power-aware computing. Submissions are welcomed on any topic in computer architecture, especially but not limited to: microprocessor and multiprocessor systems, microarchitecture and ILP processors, workload characterization, performance evaluation and simulation techniques, compiler-hardware and operating system-hardware interactions, interconnect architectures, memory and cache systems, power and thermal issues at the architecture level, I/O architectures and techniques, independent validation of previously published results, analysis of unsuccessful techniques, domain-specific processor architectures (e.g., embedded, graphics, network, etc.), real-time and high-availability architectures, reconfigurable systems.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:604180095
Book学术官方微信
小红书