ORSHIN Attack Defense Framework

Transient execution that results from mispredicted store-to-load dependencies can cause persistent changes in the microarchitecture, which can be used to intentionally leak secrets from a victim process using a covert channel

Description

Transient execution that results from mispredicted store-to-load dependencies can cause persistent changes in the microarchitecture, which can be used to intentionally leak secrets from a victim process using a covert channel

Risk Assesment: 5.6

CWE

CVE

CVE-2017-5753

CVE-2017-5715

Attack Surfaces

Speculation (MITRE EMB3D PID-11)

Attack Vectors

Speculative Execution (MITRE EMB3D TID-103)

Defenses

preventing speculation altogether, Inserting fences at every load, Inserting fences at sensitive loads, Disabling store-to-load speculation in the hardware

preventing speculation on secrets, Implementing ProSpeCT or similar mechanisms in hardware, ...

removing the covert channel, Cache partitioning, Disabling hyperthreading, ...