Understanding and Improving the Performance of Mitigating Transient
Execution Attacks
Name
Behrens-behrensj-PhD-EECS-2022-thesis.pdf
Description
Thesis PDF
Size
414.57 KB
Format
Adobe PDF
Checksum (MD5)
878dc72f8d5a39c1630328dd74f34d95
Author(s)
Behrens, Jonathan
Advisor(s)
Kaashoek, M. Frans
Belay, Adam
Date Issued
February 2022
Publisher
Massachusetts Institute of Technology
Abstract
This thesis makes two contributions: (1) a measurement study of the performance evolution of mitigations against transient execution attacks over generations of processors, and (2) the WARD kernel design, which eliminates as much as half the overhead of mitigations on older processors.
The measurement study maps end-to-end overheads to the specific mitigations that cause them. It reveals that hardware fixes for several transient execution attacks have reduced overheads on OS heavy workloads by a factor of ten. However, overheads for JavaScript applications have remained roughly flat because they are caused by mitigations for attacks that even the most recent processors are still vulnerable to. Finally, the study shows that a few mitigations account for most performance costs.
WARD is a novel operating system architecture that is resilient to transient execution attacks, yet avoids expensive software mitigations that existing operating systems employ when running on pre-2018 processors. It leverages a new hardware/software contract termed the Unmapped Speculation Contract, which describes limits on the speculative behavior of processors.
MIT Department
Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science
Terms of Use
In Copyright - Educational Use Permitted
Copyright MIT
Persistent DSpace Link
