Abstract:Speculative execution side-channel vulnerabilities such as Spectre reveal that conventional architecture designs lack security consideration. This article proposes a software transparent defense framework, named as Conditional Speculation, against Spectre vulnerabilities found on traditional out-of-order microprocessors. It introduces the concept of security dependence to mark speculative memory instructions which could leak information with potential security risks. More specifically, security-dependent instructions are detected and marked with suspect speculation flags in the Issue Queue. All the instructions can be speculatively issued for execution in accordance with the classic out-of-order pipeline. For those instructions with suspect speculation flags, they are considered as safe instructions if their speculative execution dose not refill new cache lines with unauthorized privilege data. Otherwise, they are considered as unsafe instructions and thus not allowed to execute speculatively. To pursue a balance of performance and security, we investigate two filtering mechanisms, Cache-hit-based Hazard Filter and Trusted Page Buffer-based Hazard Filter to filter out false security hazards. As for true security hazards, we have two approaches to prevent them from changing cache states. One is to block all unsafe access, the other is to fetch them from lower-level caches or memory to a speculative buffer temporarily, and refill them after confirming that they are on the correct execution path. Our design philosophy is to speculatively execute safe instructions to maintain the performance benefits of out-of-order execution while delaying the cache updates for speculative execution of unsafe instructions for security consideration. We evaluate Conditional Speculation in terms of perf-rmance, security, and area. The experimental results show that the hardware overhead is marginal and the performance overhead is minimal.

An Architecture & Mechanism for Supporting Speculative Execution of a Context-full Reconfigurable Function Unit

A Fully Data-Driven Reconfigurable Architecture with Very Coarse-Grained Execution Units

A Reconfigurable Processor Architecture Combining Multi-Core and Reconfigurable Processing Units

Exploiting Security Dependence for Conditional Speculation Against Spectre Attacks

Abstract interpretation under speculative execution

A Flexible Soft Error Mitigation Framework Leveraging Dynamic Partial Reconfiguration Technology

High Performance Hardware Stack for Seamless Context Switching

SPECRUN: The Danger of Speculative Runahead Execution in Processors

Speculative Parallelization of Sequential Loops on Multicores

Acceleration of control flows on reconfigurable architecture with a composite method

Evaluation and Tradeoffs for Out-of-Order Execution on Reconfigurable Heterogeneous MPSoC

Run-Time Phase Prediction For A Reconfigurable Vliw Processor

HEUSPEC: A Software Speculation Parallel Model

A Hybrid Reconfigurable Architecture and Design Methods Aiming at Control-Intensive Kernels

Supporting Speculative Parallelization in the Presence of Dynamic Data Structures

A Reconfigurable Floating-Point Fft Architecture

An Utilization-Efficient Context Memory Design for Reconfigurable Processing Array with Locally Shared Strategy

SpecBox: A Label-Based Transparent Speculation Scheme Against Transient Execution Attacks

Design of Control Circuit Based on Reconfigurable Public Key Cryptography Coprocessor

Dynamic Context Management for Coarse-Grained Reconfigurable Array Dsp Architecture

Reorder Buffer Contention: A Forward Speculative Interference Attack for Speculation Invariant Instructions