Abstract:A new class of transient execution-based attacks, as known as Microarchitectural Data Sampling (MDS), were discovered in recent studies, such as RIDL, Fallout, and ZombieLoad, which have imposed severe threats to general-purpose processors. In MDS attacks, the attacker can steal the information from privileged CPU internal buffers, such as store buffers, line fill buffers, and load ports. To prevent these buffers from leaking information, processor vendors proposed mitigation via microcode update that overwrites CPU internal buffers as soon as the privilege levels are changed. However, the problem if a given architecture is safe against MDS attacks is still to be fully solved.In this study, we propose a formal verification method based on model checking to verify the microarchitectural security against MDS attacks. We formulate the MDS attacks as operation sequences, and set up a behavior model to describe the microarchitectural design correlated MDS attacks. A operation sequence is considered as an MDS attack if the operation sequence can obtain transient illegal data leaked from internal buffers during the operations. We enumerate all the possible sequences by binary decision diagram (BDD)-based statechart traversal, and output all the counterexamples. The experimental results show that the proposed method can sufficiently check the MDS attacks, and a kind of attack is detected to be able to bypass the mitigation proposed by Intel, which was contemporarily proposed as CacheOut attack.

Code Mechanical Solidification and Verification in MEMS Security Devices

Development of a Computer Security Authentication System–based MEMS Coded Lock

MIPE: a Practical Memory Integrity Protection Method in a Trusted Execution Environment.

Integration Design of Micro-Electro-Mechanical Encryption System

Research on an On-Chip MEMS Based Safety and Arming Device with a Mechanical Encryption System.

Study on A Mems Cad System Based on Solidworks

SeVMM: VMM-Based Security Control Model

Development of solid-based modeling system for surface micromachined MEMS

Structure Mechanism Of Mems Security Stronglink With Multi-Try Function

Security Memory System for Mobile Device or Computer Against Memory Attacks

Using Micro Electromechanical Systems for Coded Locks

The Applications of NVM Technology in Hardware Security.

Systematic Direct Solid Modeling Approach for Surface Micromachined Mems

Research on Multiphysics-Driven MEMS Safety and Arming Devices

A mechanical metamaterial with reprogrammable logical functions

VMMC: a Test-Bed for Machining

Cpv – Simulation and Verification for Membrane Computing

On-chip mechanical computing: status, challenges, and opportunities

Computer Simulation and CAD of MEMS and Microsystems

Model Checking for Microarchitectural Data Sampling Security

Microelectromechanical System Technology and Its Application