• Home

  • Documents

  • Home - Energy and Commerce Committee · affecting the companies' products.l These...
28

Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information

  • Upload
    others

  • View
    0

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information
Page 2: Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information
Page 3: Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information
Page 4: Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information
Page 5: Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information
Page 6: Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information
Page 7: Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information
Page 8: Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information
Page 9: Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information
Page 10: Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information
Page 11: Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information
Page 12: Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information
Page 13: Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information
Page 14: Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information
Page 15: Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information
Page 16: Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information
Page 17: Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information
Page 18: Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information
Page 19: Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information
Page 20: Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information
Page 21: Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information
Page 22: Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information
Page 23: Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information
Page 24: Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information
Page 25: Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information
Page 26: Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information
Page 27: Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information
Page 28: Home - Energy and Commerce Committee · affecting the companies' products.l These vulnerabilities — dubbed "Meltdown" and "Spectre" — enable unauthorized access to information

The spectre of hardware bugs – How to avoid the security ...people.redhat.com/jcm/talks/frOSCon_2018.pdf · 10 The spectre of hardware bugs | How to avoid the security meltdown

The spectre of hardware bugs – How to avoid the security ...people.redhat.com/jcm/talks/frOSCon_2018.pdf · 10 The spectre of hardware bugs | How to avoid the security meltdown

Documents
Matthew Riley mattdr@google.com @mdriley25519 · meltdown VULNERABILITY DETAILS other names Spectre variant 3 Rogue data cache load (Intel) processors affected Intel, some ARM (e.g

Matthew Riley [email protected] @mdriley25519 · meltdown VULNERABILITY DETAILS other names Spectre variant 3 Rogue data cache load (Intel) processors affected Intel, some ARM (e.g

Documents
SEPTEMBER 2018€¦ · What’s more, Meltdown and Spectre existed for two decades before being discovered, ... criminals can browse all data on the system or shared drives to assess

SEPTEMBER 2018€¦ · What’s more, Meltdown and Spectre existed for two decades before being discovered, ... criminals can browse all data on the system or shared drives to assess

Documents
1 Real time Detection of Spectre and Meltdown Attacks ...Meltdown attacks while retaining the performance benefits of modern processors, in this paper, we present a real-time detection

1 Real time Detection of Spectre and Meltdown Attacks ...Meltdown attacks while retaining the performance benefits of modern processors, in this paper, we present a real-time detection

Documents
Yui Kee Computing Ltd - crypto.com.hk · Yui Kee Computing Ltd. ... Cortex-A57 and Cortex-A72 Spectre • Intel processors ... Intel Meltdown patch will slow down your AWS EC2 server

Yui Kee Computing Ltd - crypto.com.hk · Yui Kee Computing Ltd. ... Cortex-A57 and Cortex-A72 Spectre • Intel processors ... Intel Meltdown patch will slow down your AWS EC2 server

Documents
CleanupSpec: An ``Undo'' Approach to Safe Speculationmemlab.ece.gatech.edu/papers/MICRO_2019_3.pdf · Speculation-based attacks like Spectre [28], Meltdown [32], Fore-shadow [46],

CleanupSpec: An ``Undo'' Approach to Safe Speculationmemlab.ece.gatech.edu/papers/MICRO_2019_3.pdf · Speculation-based attacks like Spectre [28], Meltdown [32], Fore-shadow [46],

Documents
Spectre, Meltdown, and Linux · Meltdown • Spectre variant “3” • Read kernel data from userspace. • Fixed with page table isolation kernel changes (Kaiser for older kernels)

Spectre, Meltdown, and Linux · Meltdown • Spectre variant “3” • Read kernel data from userspace. • Fixed with page table isolation kernel changes (Kaiser for older kernels)

Documents
Spectre/Meltdown at eCG: Rebooting 80k cores · - Meltdown: melts security boundaries which are normally enforced by the hardware - Spectre: exploits speculative execution on modern

Spectre/Meltdown at eCG: Rebooting 80k cores · - Meltdown: melts security boundaries which are normally enforced by the hardware - Spectre: exploits speculative execution on modern

Documents
The CPU Flaw: Spectre and Meltdown Exposedflagcomputerrepair.co.uk/wp-content/uploads/2018/01/Spectre-Meltd… · Spectre and Meltdown exposed: How you’ll be affected 03 . Imagine

The CPU Flaw: Spectre and Meltdown Exposedflagcomputerrepair.co.uk/wp-content/uploads/2018/01/Spectre-Meltd… · Spectre and Meltdown exposed: How you’ll be affected 03 . Imagine

Documents
Future Work An analysis of the effects of the Spectre and ... · requirements also conflict with the Spectre and Meltdown patches that are notorious for reducing performance. This

Future Work An analysis of the effects of the Spectre and ... · requirements also conflict with the Spectre and Meltdown patches that are notorious for reducing performance. This

Documents
Security Bulletin February 2018 - Liquid IT · Meltdown and Spectre work on personal computers, mobile devices, and in the cloud. Depending on the cloud provider's infrastructure,

Security Bulletin February 2018 - Liquid IT · Meltdown and Spectre work on personal computers, mobile devices, and in the cloud. Depending on the cloud provider's infrastructure,

Documents
Meltdown / Spectre - Red Hat€¦ · Patching Spectre Variant #1 – Bounds Check Violations Kernel Patch Variant #2 – Branch Predictor Kernel Patch & CPU Microcode Updates. Impact

Meltdown / Spectre - Red Hat€¦ · Patching Spectre Variant #1 – Bounds Check Violations Kernel Patch Variant #2 – Branch Predictor Kernel Patch & CPU Microcode Updates. Impact

Documents
CPU models after Spectre & Meltdown - linux-kvm.org · 7 Paolo Bonzini – KVM Forum 2018 CPU models in QEMU Named configurations allow scheduling flexibility Processor code names

CPU models after Spectre & Meltdown - linux-kvm.org · 7 Paolo Bonzini – KVM Forum 2018 CPU models in QEMU Named configurations allow scheduling flexibility Processor code names

Documents
Infographic: Meltdown/Spectre - Adaptiva Insights...Part 1 Meltdown/Spectre can't crash systems, but some fixes can. Part 2 Protected System Fix causes system slowdown Impact may

Infographic: Meltdown/Spectre - Adaptiva Insights...Part 1 Meltdown/Spectre can't crash systems, but some fixes can. Part 2 Protected System Fix causes system slowdown Impact may

Documents
CS356: Meltdown & Spectre · Spectre: The Risks of Speculative Execution 1. Locate or introduce a sequence of instructions within the process address space which, when executed, act

CS356: Meltdown & Spectre · Spectre: The Risks of Speculative Execution 1. Locate or introduce a sequence of instructions within the process address space which, when executed, act

Documents
Rendition Infosec Meltdown and Spectre Slides · Meltdown and Spectre - understanding and mitigating the threats (Part Deux) Jake Williams @MalwareJake SANS / Rendition Infosec sans.org

Rendition Infosec Meltdown and Spectre Slides · Meltdown and Spectre - understanding and mitigating the threats (Part Deux) Jake Williams @MalwareJake SANS / Rendition Infosec sans.org

Documents
Spectre Returns! Speculation Attacks using the Return ... · like Spectre variants, Meltdown does not rely on using misspeculation. Since an exception eventually will be raised, this

Spectre Returns! Speculation Attacks using the Return ... · like Spectre variants, Meltdown does not rely on using misspeculation. Since an exception eventually will be raised, this

Documents
Exploiting modern microarchitectures: Meltdown, … Exploiting modern microarchitectures: Meltdown, Spectre, and other ... 8 Exploiting modern microarchitectures: Meltdown, Spectre,

Exploiting modern microarchitectures: Meltdown, … Exploiting modern microarchitectures: Meltdown, Spectre, and other ... 8 Exploiting modern microarchitectures: Meltdown, Spectre,

Documents
Status of Embedded Linux€¦ · • Spectre and Meltdown • Break security via side-channel timing attacks using speculative execution • Variants 1, 2 (Spectre), and 3 (Meltdown)

Status of Embedded Linux€¦ · • Spectre and Meltdown • Break security via side-channel timing attacks using speculative execution • Variants 1, 2 (Spectre), and 3 (Meltdown)

Documents
CERT-MU MELTDOWN & SPECTRE VULNERABILITIEScert-mu.govmu.org/English/Documents/White Papers... · 1.0 INTRODUCTION On 3rd January 2018, two security flaws dubbed as Meltdown and Spectre

CERT-MU MELTDOWN & SPECTRE VULNERABILITIEScert-mu.govmu.org/English/Documents/White Papers... · 1.0 INTRODUCTION On 3rd January 2018, two security flaws dubbed as Meltdown and Spectre

Documents
Exploiting modern microarchitectures: Meltdown, …...7 Exploiting modern microarchitectures: Meltdown, Spectre, and other attacks Common concepts in modern architectures • Operating

Exploiting modern microarchitectures: Meltdown, …...7 Exploiting modern microarchitectures: Meltdown, Spectre, and other attacks Common concepts in modern architectures • Operating

Documents
Open Source Insight: Meltdown, Spectre Security Flaws “Impact Everything”

Open Source Insight: Meltdown, Spectre Security Flaws “Impact Everything”

Technology
The impact of Spectre and Meltdown - Instaclustr · 2018-02-06 · 2. Intro to Spectre and Meltdown 3. Intro to Spectre and Meltdown 4 • Three exploits • Target information leakage

The impact of Spectre and Meltdown - Instaclustr · 2018-02-06 · 2. Intro to Spectre and Meltdown 3. Intro to Spectre and Meltdown 4 • Three exploits • Target information leakage

Documents
Meltdown and Spectre - How to Detect the Vulnerabilities and Exploits

Meltdown and Spectre - How to Detect the Vulnerabilities and Exploits

Technology
Meltdown & Spectre - uni-wuerzburg.de · Michael Schwarz (Graz University of Technology) Who reported Spectre? Jann Horn (Google Project Zero) Paul Kocher in collaboration with Daniel

Meltdown & Spectre - uni-wuerzburg.de · Michael Schwarz (Graz University of Technology) Who reported Spectre? Jann Horn (Google Project Zero) Paul Kocher in collaboration with Daniel

Documents
Spectre y Meltdown: dos ataques basados en microarquitectura · Cuando se detecta una instrucción de salto condicional sin resolver . Se supone o predice el camino del salto: tomado

Spectre y Meltdown: dos ataques basados en microarquitectura · Cuando se detecta una instrucción de salto condicional sin resolver . Se supone o predice el camino del salto: tomado

Documents
Support NewsletterWelcome to issue 22 of the support newsletter. This edition has our latest information and position on the Meltdown/ Spectre vulnerabilities, as well as including

Support NewsletterWelcome to issue 22 of the support newsletter. This edition has our latest information and position on the Meltdown/ Spectre vulnerabilities, as well as including

Documents
Spectre y Meltdown: dos ataques basados en microarquitecturainformatica.ucm.es/data/cont/media/www/pag-103596/transparencias/... · Reading privileged memory with a side-channel (Jann

Spectre y Meltdown: dos ataques basados en microarquitecturainformatica.ucm.es/data/cont/media/www/pag-103596/transparencias/... · Reading privileged memory with a side-channel (Jann

Documents
Meltdown and Spectre - Rendition InfoSec · PDF fileMeltdown and Spectre - understanding and mitigating the threats Jake Williams @MalwareJake SANS / Rendition Infosec sans.org / rsec.us

Meltdown and Spectre - Rendition InfoSec · PDF fileMeltdown and Spectre - understanding and mitigating the threats Jake Williams @MalwareJake SANS / Rendition Infosec sans.org / rsec.us

Documents
Spectre Origins (Spectre Prequel Series)

Spectre Origins (Spectre Prequel Series)

Documents