Port Contention Goes Portable

Rokicki, Thomas; Maurice, Clémentine; Botvinnik, Marina; Oren, Yossi

doi:10.1145/3488932.3517411

Cited by 7 publications

(4 citation statements)

References 21 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Mitigating Port Contention with WASM-MUTATE Rokicki et al [39] showed the practicality of a covert sidechannel attack using port contention within WebAssembly code in the browser. This attack fundamentally relies on the precise prediction of Wasm instructions that trigger port contention.…”

Section: Discussionmentioning

confidence: 99%

Wasm-Mutate: Fast and Effective Binary Diversification for Webassembly

Cabrera Arteaga,

Fitzgerald,

Monperrus

et al. 2023

Preprint

View full text Add to dashboard Cite

Section: Discussionmentioning

confidence: 99%

Wasm-Mutate: Fast and Effective Binary Diversification for Webassembly

Cabrera Arteaga,

Fitzgerald,

Monperrus

et al. 2023

Preprint

View full text Add to dashboard Cite

“…As a result of identity theft and authentication attacks, device identification has become an important topic in recent years. However, most fingerprint methods such as [19,30] rely on the differences between machines with different software or hardware. Consequently, these kind of fingerprints would not be able to distinguish between identical devices in the same environment.…”

Section: Discussionmentioning

confidence: 99%

“…As temperature and power are not the only CPU micro-architectural properties, we infer that more features can be used in the identification, which will improve its robustness, accuracy, and stability. Furthermore, we believe that a power consumption feature can be added to existing authentication methods [30,19,7,38,40]. Artifact Availability.…”

Section: Discussionmentioning

confidence: 99%

“…We propose a proof of concept of web-based power fingerprinting. This fingerprinting is built around WebAssembly as it offers more atomic operations than plain JavaScript, and is based on the code of Rokicki et al [30]. We use a Python Selenium framework to automatically test and evaluate the power consumption of WebAssembly instructions.…”

Section: Portable Code Proof Of Concept Setupmentioning

confidence: 99%

See 1 more Smart Citation

The Finger in the Power: How to Fingerprint PCs by Monitoring Their Power Consumption

Botvinnik

Tomer

Rokicki

et al. 2023

Lecture Notes in Computer Science

Self Cite

View full text Add to dashboard Cite

Power analysis has long been used to tell apart different instructions running on the same machine. In this work, we show that it is also possible to use power consumption to tell apart different machines running the same instructions, even if these machines have entirely identical hardware and software configurations, and even if the power consumption measurements are carried out using low-rate software-based methods. We collected an extended dataset of power consumption traces from 291 desktop and server systems, spanning multiple processor generations and vendors (Intel and AMD). After analyzing them, we discovered that profiling the power consumption of individual assembly instructions makes it possible to create a fingerprinting agent that can identify individual machines with high accuracy. Our classifier approaches its peak accuracy after less than 10 instructions, meaning that the fingerprint can take a very short time to capture. We analyzed the stability of the fingerprint over time and discovered that, while it remains relatively stable, it is significantly affected by temperature changes. We also carried out a proof-of-concept evaluation using portable WebAssembly code, showing that our method can still be applied, albeit at a reduced accuracy, without using native instructions for the profiling step. Our method depends on the ability to measure power, which is currently restricted to highprivileged "ring 0" code on modern PCs. This limits the current use of our method to defense-only settings, such as strengthening authentication or anti-counterfeiting. Our tools and datasets are publicly released as an open-source repository. Our work highlights the importance of protecting power consumption measurements from unauthorized access.

show abstract

CPU Port Contention Without SMT

Rokicki

Maurice

Schwarz

2022

Computer Security – ESORICS 2022

Self Cite

View full text Add to dashboard Cite

CPU port contention has been used in the last years as a stateless side channel to perform side-channel attacks and transient execution attacks. One drawback of this channel is that it heavily relies on simultaneous multi-threading, which can be absent from some CPUs or simply disabled by the OS. In this paper, we present sequential port contention, which does not require SMT. It exploits sub-optimal scheduling to execution ports for instruction-level parallelization. As a result, specifically-crafted instruction sequences on a single thread suffer from an increased latency. We show that sequential port contention can be exploited from web browsers in WebAssembly. We present an automated framework to search for instruction sequences leading to sequential port contention for specific CPU generations, which we evaluated on 50 different CPUs. An attacker can use these sequences from the browser to determine the CPU generation within 12 s with a 95 % accuracy. This fingerprint is highly stable and resistant to system noise, and we show that mitigations are either expensive or only probabilistic.

show abstract

Port Contention Goes Portable

Cited by 7 publications

References 21 publications

Wasm-Mutate: Fast and Effective Binary Diversification for Webassembly

Wasm-Mutate: Fast and Effective Binary Diversification for Webassembly

The Finger in the Power: How to Fingerprint PCs by Monitoring Their Power Consumption

CPU Port Contention Without SMT

Contact Info

Product

Resources

About