Talk by Adria Gascon (Google)

on YouTube ↗35m

" summary

Presents SNPeek, a practical evaluation of AMD SEV SNP showing nested page tables leak 4 KB granularity memory-access patterns, ciphertext visibility reveals byte-level changes and performance counters expose control-flow. Builds a kernel patch (parfait repo) to collect leakage traces and trains classifiers (LSTM) to reconstruct data from PIR, ORAM and a Stable DP histogram; finds ORAM fails unless aligned to leakage model but DP-style noise partially restores privacy. Proposes ORAM variants, per-app mitigations and defense-in-depth.

AI-written summary · about

" chapters (9)

1. 0:00Introduction
2. 1:34Confidential virtual machines
3. 8:44Threat model and hardware
4. 13:05Side-channel attacks
5. 20:12Applications and workloads
6. 23:20SNPeek and research
7. 29:42Leakage analysis and attacks
8. 31:09Mitigations and future work
9. 33:02Defense in depth and conclusion

" related talks

• 52mSecuring The Unseen: Vulnerability Research In Confidential ComputingJosh Eads, Cfir Cohen · Hardwear.io USA 2023
• 25mThe Memory of a MeltdownShane Cota, Chris Magistrado · BSidesSF 2018
• 25mTelling Your Secrets without Page Faults...Raoul Strackx, Frank Piessens, Jo Van Bulck, Nico Weichbrodt, Rüdiger Kapitza · 26th USENIX Security Symposium (USENIX Security '17)
• 46mRethinking Architectures and Abstraction for a World Where Security Improvements Matter More than Performance GainsPaul Kocher · USENIX Security '18
• 15mI Know What You Said: Unveiling Hardware Cache Side-Channels in Local LargeZibo Gao, Junjie Hu, Feng Guo, Yixin Zhang, Yinglong Han, Siyuan Liu, Haiyang Li, Zhiqiang Lv · USENIX Security '25
• 01h 01mTutorial: Side-Channel Attacks and Transient Execution Vulnerab...Allison Randal, Giorgos Christou · RISC-V Summit 2022
• 24mThe Memory of a MeltdownShane Cota, Chris Magistrado · BSidesSF 2018
• 01h 28m“Spectre: Secrets, Side-Channels, Sandboxes, and Security”Chandler Carruth · CppCon 2018