https://www.sciencedaily.com/releases/2021/04/210430165903.htm ScienceDaily --------------------------------------------------------------------- Your source for the latest research news Follow Facebook Twitter LinkedIn Subscribe RSS Feeds Newsletters New: * Genetic Effects of Chernobyl Radiation * Experimental Drug to Treat Alzheimer's * COVID-19 Survivors: Long-Term Effects * Mars Could Harbor Life Beneath Its Surface * Pelicans: The Wave Beneath Their Wings * New All-Sky Map of Milky Way's Outer Reaches * Were Tyrannosaurs Social Animals? * Little Foot: When Humans and Apes Diverged * Mars Helicopter: Historic First Flight * Entanglement-Based Quantum Network advertisement Follow all of ScienceDaily's latest research news and top science headlines! Science News from research organizations --------------------------------------------------------------------- 1 2 Computer scientists discover new vulnerability affecting computers globally Date: April 30, 2021 Source: University of Virginia School of Engineering and Applied Science Summary: A team o computer science researchers has uncovered a line of attack that breaks all Spectre defenses, meaning that billions of computers and other devices across the globe are just as vulnerable today as they were when Spectre was first announced. Share: FULL STORY --------------------------------------------------------------------- In 2018, industry and academic researchers revealed a potentially devastating hardware flaw that made computers and other devices worldwide vulnerable to attack. advertisement --------------------------------------------------------------------- Researchers named the vulnerability Spectre because the flaw was built into modern computer processors that get their speed from a technique called "speculative execution," in which the processor predicts instructions it might end up executing and preps by following the predicted path to pull the instructions from memory. A Spectre attack tricks the processor into executing instructions along the wrong path. Even though the processor recovers and correctly completes its task, hackers can access confidential data while the processor is heading the wrong way. Since Spectre was discovered, the world's most talented computer scientists from industry and academia have worked on software patches and hardware defenses, confident they've been able to protect the most vulnerable points in the speculative execution process without slowing down computing speeds too much. They will have to go back to the drawing board. A team of University of Virginia School of Engineering computer science researchers has uncovered a line of attack that breaks all Spectre defenses, meaning that billions of computers and other devices across the globe are just as vulnerable today as they were when Spectre was first announced. The team reported its discovery to international chip makers in April and will present the new challenge at a worldwide computing architecture conference in June. The researchers, led by Ashish Venkat, William Wulf Career Enhancement Assistant Professor of Computer Science at UVA Engineering, found a whole new way for hackers to exploit something called a "micro-op cache," which speeds up computing by storing simple commands and allowing the processor to fetch them quickly and early in the speculative execution process. Micro-op caches have been built into Intel computers manufactured since 2011. advertisement --------------------------------------------------------------------- Venkat's team discovered that hackers can steal data when a processor fetches commands from the micro-op cache. "Think about a hypothetical airport security scenario where TSA lets you in without checking your boarding pass because (1) it is fast and efficient, and (2) you will be checked for your boarding pass at the gate anyway," Venkat said. "A computer processor does something similar. It predicts that the check will pass and could let instructions into the pipeline. Ultimately, if the prediction is incorrect, it will throw those instructions out of the pipeline, but this might be too late because those instructions could leave side-effects while waiting in the pipeline that an attacker could later exploit to infer secrets such as a password." Because all current Spectre defenses protect the processor in a later stage of speculative execution, they are useless in the face of Venkat's team's new attacks. Two variants of the attacks the team discovered can steal speculatively accessed information from Intel and AMD processors. "Intel's suggested defense against Spectre, which is called LFENCE, places sensitive code in a waiting area until the security checks are executed, and only then is the sensitive code allowed to execute," Venkat said. "But it turns out the walls of this waiting area have ears, which our attack exploits. We show how an attacker can smuggle secrets through the micro-op cache by using it as a covert channel." Venkat's team includes three of his computer science graduate students, Ph.D. student Xida Ren, Ph.D. student Logan Moody and master's degree recipient Matthew Jordan. The UVA team collaborated with Dean Tullsen, professor of the Department of Computer Science and Engineering at the University of California, San Diego, and his Ph.D. student Mohammadkazem Taram to reverse-engineer certain undocumented features in Intel and AMD processors. advertisement --------------------------------------------------------------------- They have detailed the findings in their paper: "I See Dead ?ops: Leaking Secrets via Intel/AMD Micro-Op Caches." This newly discovered vulnerability will be much harder to fix. "In the case of the previous Spectre attacks, developers have come up with a relatively easy way to prevent any sort of attack without a major performance penalty" for computing, Moody said. "The difference with this attack is you take a much greater performance penalty than those previous attacks." "Patches that disable the micro-op cache or halt speculative execution on legacy hardware would effectively roll back critical performance innovations in most modern Intel and AMD processors, and this just isn't feasible," Ren, the lead student author, said. "It is really unclear how to solve this problem in a way that offers high performance to legacy hardware, but we have to make it work," Venkat said. "Securing the micro-op cache is an interesting line of research and one that we are considering." Venkat's team has disclosed the vulnerability to the product security teams at Intel and AMD. Ren and Moody gave a tech talk at Intel Labs worldwide April 27 to discuss the impact and potential fixes. Venkat expects computer scientists in academia and industry to work quickly together, as they did with Spectre, to find solutions. The team's paper has been accepted by the highly competitive International Symposium on Computer Architecture, or ISCA. The annual ISCA conference is the leading forum for new ideas and research results in computer architecture and will be held virtually in June. Venkat is also working in close collaboration with the Processor Architecture Team at Intel Labs on other microarchitectural innovations, through the National Science Foundation/Intel Partnership on Foundational Microarchitecture Research Program. Venkat was well prepared to lead the UVA research team into this discovery. He has forged a long-running partnership with Intel that started in 2012 when he interned with the company while he was a computer science graduate student at the University of California, San Diego. This research, like other projects Venkat leads, is funded by the National Science Foundation and Defense Advanced Research Projects Agency. Venkat is also one of the university researchers who co-authored a paper with collaborators Mohammadkazem Taram and Tullsen from UC San Diego that introduce a more targeted microcode-based defense against Spectre. Context-sensitive fencing, as it is called, allows the processor to patch running code with speculation fences on the fly. Introducing one of just a handful more targeted microcode-based defenses developed to stop Spectre in its tracks, "Context-Sensitive Fencing: Securing Speculative Execution via Microcode Customization" was published at the ACM International Conference on Architectural Support for Programming Languages and Operating Systems in April 2019. The paper was also selected as a top pick among all computer architecture, computer security, and VLSI design conference papers published in the six-year period between 2014 and 2019. The new Spectre variants Venkat's team discovered even break the context-sensitive fencing mechanism outlined in Venkat's award-winning paper. But in this type of research, breaking your own defense is just another big win. Each security improvement allows researchers to dig even deeper into the hardware and uncover more flaws, which is exactly what Venkat's research group did. make a difference: sponsored opportunity --------------------------------------------------------------------- Story Source: Materials provided by University of Virginia School of Engineering and Applied Science. Original written by Audra Book. Note: Content may be edited for style and length. --------------------------------------------------------------------- Cite This Page: * MLA * APA * Chicago University of Virginia School of Engineering and Applied Science. "Computer scientists discover new vulnerability affecting computers globally." ScienceDaily. ScienceDaily, 30 April 2021. . University of Virginia School of Engineering and Applied Science. (2021, April 30). Computer scientists discover new vulnerability affecting computers globally. ScienceDaily. Retrieved May 1, 2021 from www.sciencedaily.com/releases/2021/04/210430165903.htm University of Virginia School of Engineering and Applied Science. "Computer scientists discover new vulnerability affecting computers globally." ScienceDaily. www.sciencedaily.com/releases/2021/04/ 210430165903.htm (accessed May 1, 2021). * RELATED TOPICS + Computers & Math o Computers and Internet o Computer Science o Hacking o Distributed Computing + Science & Society o Security and Defense o Surveillance o STEM Education o Privacy Issues advertisement --------------------------------------------------------------------- * RELATED TERMS + Quantum computer + John von Neumann + Cryptography + Computer + Computer simulation + Computer insecurity + Computer security + Computing power everywhere 1 2 3 4 5 RELATED STORIES --------------------------------------------------------------------- Computer Security: Preventing Attacks Made Possible by Meltdown/ Spectre Oct. 18, 2018 Researchers have developed a new security system that has been shown to outperform Intel's own approach at preventing so-called 'timing attacks' made possible by vulnerabilities like Meltdown and ... Optical, Electrical Bistability Study Sheds Light on Next-Gen High Speed Data Transfer Sep. 18, 2017 Today, electrical bistable devices are the foundation of digital electronics, serving as building blocks of switches, logic gates and memories in computer systems. However, the bandwidth of these ... Looking for the Quantum Frontier Apr. 27, 2017 A new theoretical framework has been developed to identify computations that occupy the 'quantum frontier' - the boundary at which problems become impossible for today's computers and can only be ... Scientist Uncovers Physics Behind Plasma-Etching Process Jan. 27, 2017 A team of physicists has uncovered some of the physics that make possible the etching of silicon computer chips, which power cell phones, computers, and a huge range of electronic ... FROM AROUND THE WEB --------------------------------------------------------------------- ScienceDaily shares links with sites in the TrendMD network and earns revenue from third-party advertisers, where indicated. Print Email Share --------------------------------------------------------------------- advertisement --------------------------------------------------------------------- 1 2 3 4 5 Most Popular this week --------------------------------------------------------------------- SPACE & TIME (c) (c) elen31 / AdobeMars Has Right Ingredients for Present-Day Microbial Life Beneath Its Surface, Study Finds (c) (c) Camille / AdobeAstronomers Release New All-Sky Map of Milky Way's Outer Reaches (c)NASA's Ingenuity Mars Helicopter Succeeds in Historic First Flight MATTER & ENERGY (c) (c) NickMo / AdobeGenetic Effects of Chernobyl Radiation (c) (c) vrx123 / AdobeNew CRISPR Technology Offers Unrivaled Control of Epigenetic Inheritance (c) (c) Robert / AdobeThe Wave Beneath Their Wings COMPUTERS & MATH Three Reasons Why COVID-19 Can Cause Silent Hypoxia Computer Scientists Discover New Vulnerability Affecting Computers Globally (c) (c) issaronow / AdobeEntanglement-Based Quantum Network advertisement --------------------------------------------------------------------- Strange & Offbeat --------------------------------------------------------------------- SPACE & TIME Not Just for Finding Planets: Exoplanet-Hunter TESS Telescope Spots Bright Gamma-Ray Burst Small Galaxies Likely Played Important Role in Evolution of the Universe Using Cosmic-Ray Neutron Bursts to Understand Gamma-Ray Bursts from Lightning MATTER & ENERGY Neural Nets Used to Rethink Material Design Move Over CRISPR, the Retrons Are Coming How to Level Up Soft Robotics COMPUTERS & MATH Small Generator Captures Heat Given Off by Skin to Power Wearable Devices Scientists Harness Molecules Into Single Quantum State Future Drones Likely to Resemble 300-Million-Year-Old Flying Machine Toggle navigation Menu SD * SD + Home Page + + Top Science News + + Latest News * Home + Home Page + + Top Science News + + Latest News * Health + View all the latest top news in the health sciences, or browse the topics below: Health & Medicine o Allergy o Alternative Medicine o Birth Control o Cancer o Diabetes o Diseases o Heart Disease o HIV and AIDS o Obesity o Stem Cells o ... more topics Mind & Brain o ADD and ADHD o Addiction o Alzheimer's o Autism o Depression o Headaches o Intelligence o Psychology o Relationships o Schizophrenia o ... more topics Living Well o Parenting o Pregnancy o Sexual Health o Skin Care o Men's Health o Women's Health o Nutrition o Diet and Weight Loss o Fitness o Healthy Aging o ... more topics * Tech + View all the latest top news in the physical sciences & technology, or browse the topics below: Matter & Energy o Aviation o Chemistry o Electronics o Fossil Fuels o Nanotechnology o Physics o Quantum Physics o Solar Energy o Technology o Wind Energy o ... more topics Space & Time o Astronomy o Black Holes o Dark Matter o Extrasolar Planets o Mars o Moon o Solar System o Space Telescopes o Stars o Sun o ... more topics Computers & Math o Artificial Intelligence o Communications o Computer Science o Hacking o Mathematics o Quantum Computers o Robotics o Software o Video Games o Virtual Reality o ... more topics * Enviro + View all the latest top news in the environmental sciences, or browse the topics below: Plants & Animals o Agriculture and Food o Animals o Biology o Biotechnology o Endangered Animals o Extinction o Genetically Modified o Microbes and More o New Species o Zoology o ... more topics Earth & Climate o Climate o Earthquakes o Environment o Geography o Geology o Global Warming o Hurricanes o Ozone Holes o Pollution o Weather o ... more topics Fossils & Ruins o Ancient Civilizations o Anthropology o Archaeology o Dinosaurs o Early Humans o Early Mammals o Evolution o Lost Treasures o Origin of Life o Paleontology o ... more topics * Society + View all the latest top news in the social sciences & education, or browse the topics below: Science & Society o Arts & Culture o Consumerism o Economics o Political Science o Privacy Issues o Public Health o Racial Disparity o Religion o Sports o World Development o ... more topics Business & Industry o Biotechnology & Bioengineering o Computers & Internet o Energy & Resources o Engineering o Medical Technology o Pharmaceuticals o Transportation o ... more topics Education & Learning o Animal Learning & Intelligence o Creativity o Educational Psychology o Educational Technology o Infant & Preschool Learning o Learning Disorders o STEM Education o ... more topics * Quirky + Top News + + Human Quirks + Odd Creatures + Bizarre Things + Weird World Keyword:[ ]Search Free Subscriptions --------------------------------------------------------------------- Get the latest science news with ScienceDaily's free email newsletters, updated daily and weekly. Or view hourly updated newsfeeds in your RSS reader: * Email Newsletters * RSS Feeds Follow Us --------------------------------------------------------------------- Keep up to date with the latest news from ScienceDaily via social networks: * Facebook * Twitter * LinkedIn Have Feedback? --------------------------------------------------------------------- Tell us what you think of ScienceDaily -- we welcome both positive and negative comments. Have any problems using the site? Questions? * Leave Feedback * Contact Us About This Site | Staff | Reviews | Contribute | Advertise | Privacy Policy | Editorial Policy | Terms of Use Copyright 2021 ScienceDaily or by other parties, where indicated. All rights controlled by their respective owners. Content on this website is for information only. It is not intended to provide medical or other professional advice. Views expressed here do not necessarily reflect those of ScienceDaily, its staff, its contributors, or its partners. Financial support for ScienceDaily comes from advertisements and referral programs, where indicated. CCPA: Do Not Sell My Information GDPR: Privacy Settings