{"title":"Hardware-Accelerated Parallel Wrong-Path Execution for Spectre Gadget Detection","authors":"Fangzheng Lin;Zeyu Gao;Yanru Lin;Yangyu Chen;Hiroshi Sasaki","doi":"10.1109/LCA.2026.3700174","DOIUrl":null,"url":null,"abstract":"Spectre vulnerabilities pose new threats to computer system security, and detecting Spectre gadgets is an important step toward effective countermeasures. Detection requires exploring program behavior along branch-mispredicted execution paths (i.e., wrong paths), which existing dynamic scanners emulate in software—incurring high overhead and limiting parallel exploration. This paper proposes a hardware-assisted dynamic gadget detection architecture that offloads wrong-path executions to a pool of in-order shadow cores on a specialized asymmetric multicore platform, enabling multiple paths to be explored in parallel. The design also features shadow memory versioning to preserve the memory view at the branch point without full memory duplication. We prototype the proposed architecture on an Xilinx VU13P FPGA. Evaluation shows that the prototype achieves 1.25–5.24 × speedup over software-based detectors.","PeriodicalId":51248,"journal":{"name":"IEEE Computer Architecture Letters","volume":"25 1","pages":"239-242"},"PeriodicalIF":2.0000,"publicationDate":"2026-01-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=11550758","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"IEEE Computer Architecture Letters","FirstCategoryId":"94","ListUrlMain":"https://ieeexplore.ieee.org/document/11550758/","RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"2026/6/4 0:00:00","PubModel":"Epub","JCR":"Q4","JCRName":"COMPUTER SCIENCE, HARDWARE & ARCHITECTURE","Score":null,"Total":0}
引用次数: 0
Abstract
Spectre vulnerabilities pose new threats to computer system security, and detecting Spectre gadgets is an important step toward effective countermeasures. Detection requires exploring program behavior along branch-mispredicted execution paths (i.e., wrong paths), which existing dynamic scanners emulate in software—incurring high overhead and limiting parallel exploration. This paper proposes a hardware-assisted dynamic gadget detection architecture that offloads wrong-path executions to a pool of in-order shadow cores on a specialized asymmetric multicore platform, enabling multiple paths to be explored in parallel. The design also features shadow memory versioning to preserve the memory view at the branch point without full memory duplication. We prototype the proposed architecture on an Xilinx VU13P FPGA. Evaluation shows that the prototype achieves 1.25–5.24 × speedup over software-based detectors.
期刊介绍:
IEEE Computer Architecture Letters is a rigorously peer-reviewed forum for publishing early, high-impact results in the areas of uni- and multiprocessor computer systems, computer architecture, microarchitecture, workload characterization, performance evaluation and simulation techniques, and power-aware computing. Submissions are welcomed on any topic in computer architecture, especially but not limited to: microprocessor and multiprocessor systems, microarchitecture and ILP processors, workload characterization, performance evaluation and simulation techniques, compiler-hardware and operating system-hardware interactions, interconnect architectures, memory and cache systems, power and thermal issues at the architecture level, I/O architectures and techniques, independent validation of previously published results, analysis of unsuccessful techniques, domain-specific processor architectures (e.g., embedded, graphics, network, etc.), real-time and high-availability architectures, reconfigurable systems.