Overview
Coursera Flash Sale
40% Off Coursera Plus for 3 Months!
Grab it
Learn about a novel framework for protecting compartmentalized software systems from hardware cache side-channel attacks in this 14-minute conference presentation from USENIX Security '25. Explore the unique security challenges that compartmentalized software faces, including performance implications, efficient data sharing requirements, and preventing information leakage when shared libraries serve multiple callers. Discover the SCC (Secure Caches for Compartmentalized Software) framework and its three key innovations: multi-level cache partitioning with L1 cache optimizations to maintain performance, domain-oriented partitioning that creates cache partitions per memory domain rather than per compartment, and separate partition instances of shared library code for each caller. Examine the formal security proofs using operational semantics and performance evaluation results conducted with the gem5 simulator on compartmentalized benchmarks, presented by researchers from Binghamton University and University of California, Riverside.
Syllabus
USENIX Security '25 - Secure Caches for Compartmentalized Software
Taught by
USENIX