{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T10:35:31Z","timestamp":1781606131792,"version":"3.54.5"},"reference-count":59,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100003725","name":"National Research Foundation of Korea (NRF) grant","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100003725","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Korean government","award":["2023R1A2C2006862"],"award-info":[{"award-number":["2023R1A2C2006862"]}]},{"name":"Institute of Information & communications Technology Planning & Evaluation (IITP) grant"},{"name":"Korean government","award":["RS-2023-00227165"],"award-info":[{"award-number":["RS-2023-00227165"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2023]]},"DOI":"10.1109\/access.2023.3340680","type":"journal-article","created":{"date-parts":[[2023,12,7]],"date-time":"2023-12-07T19:40:53Z","timestamp":1701978053000},"page":"138699-138711","source":"Crossref","is-referenced-by-count":6,"title":["MicroCFI: Microarchitecture-Level Control-Flow Restrictions for Spectre Mitigation"],"prefix":"10.1109","volume":"11","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-4100-9338","authenticated-orcid":false,"given":"Hyerean","family":"Jang","sequence":"first","affiliation":[{"name":"School of Cybersecurity, Korea University, Seoul, South Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4831-7392","authenticated-orcid":false,"given":"Youngjoo","family":"Shin","sequence":"additional","affiliation":[{"name":"School of Cybersecurity, Korea University, Seoul, South Korea"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00002"},{"key":"ref2","first-page":"973","article-title":"Meltdown: Reading kernel memory from user space","volume-title":"Proc. 27th USENIX Secur. Symp. (USENIX Security)","author":"Lipp"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354252"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00087"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-29959-0_14"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363194"},{"key":"ref7","first-page":"1415","article-title":"Osiris: Automated discovery of microarchitectural side channels","volume-title":"Proc. 30th USENIX Secur. Symp. (USENIX Security)","author":"Weber"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833774"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-40667-1_14"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/s00145-009-9049-y"},{"key":"ref11","first-page":"719","article-title":"FLUSH+RELOAD: A high resolution, low noise, L3 cache side-channel attack","volume-title":"Proc. 23rd USENIX Secur. Symp. (USENIX Security)","author":"Yarom"},{"key":"ref12","first-page":"1","article-title":"Spectre returns! Speculation attacks using the return stack buffer","volume-title":"Proc. 12th USENIX Workshop Offensive Technol. (WOOT)","author":"Koruyeh"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179355"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3470496.3527429"},{"key":"ref15","first-page":"971","article-title":"Branch history injection: On the effectiveness of hardware mitigations against cross-privilege Spectre-v2 attacks","volume-title":"Proc. 31st USENIX Secur. Symp. (USENIX Security)","author":"Barberis"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833802"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2022.108546"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2019.2953709"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3377811.3380428"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00011"},{"key":"ref21","article-title":"Spectre is here to stay: An analysis of side-channels and speculative execution","author":"Mcilroy","year":"2019","journal-title":"arXiv:1902.05178"},{"key":"ref22","first-page":"1481","article-title":"SpecFuzz: Bringing Spectre-type vulnerabilities to the surface","volume-title":"Proc. 29th USENIX Secur. Symp. (USENIX Security)","author":"Oleksenko"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/3385897"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00047"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3314221.3314647"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179418"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833707"},{"key":"ref28","volume-title":"Retpoline: A Branch Target Injection Mitigation","year":"2018"},{"key":"ref29","volume-title":"Software Techniques for Managing Speculation on AMD Processors","year":"2022"},{"key":"ref30","volume-title":"Speculative Execution Side Channel Mitigations","year":"2018"},{"key":"ref31","first-page":"3825","article-title":"RETBLEED: Arbitrary speculative code execution with return instructions","volume-title":"Proc. 31st USENIX Secur. Symp. (USENIX Security)","author":"Wikner"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00033"},{"key":"ref33","article-title":"ConTExT: Leakage-free transient execution","author":"Schwarz","year":"2019","journal-title":"arXiv:1905.09100"},{"key":"ref34","volume-title":"SPEC CPU 2017","year":"2017"},{"key":"ref35","article-title":"Restricting control flow during speculative execution with venkman","author":"Shen","year":"2019","journal-title":"arXiv:1903.10651"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/1102120.1102165"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/ISPASS.2007.363733"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/2594291.2594295"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/1609956.1609960"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.24"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813673"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813644"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.101828"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23421"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom56396.2022.00063"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2023.3234184"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.26"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516649"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243797"},{"key":"ref50","first-page":"941","article-title":"Eenforcing forward-edge control-flow integrity in GCC & LLVM","volume-title":"Proc. 23rd USENIX Secur. Symp. (USENIX Security)","author":"Tice"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-62105-0_11"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/CGO.2004.1281665"},{"key":"ref53","first-page":"29","article-title":"Marss-x86: A QEMU-based micro-architectural and systems simulator for x86 multicore processors","volume-title":"Proc. 1st Int. QEMU Users\u2019 Forum","author":"Patela"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/sp.2013.44"},{"key":"ref55","volume-title":"Linux Kernel Development","author":"Love","year":"2003"},{"key":"ref56","volume-title":"Intel64 and IA-32 Architectures Optimization Reference Manual","year":"2012"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/3123939.3124539"},{"key":"ref58","first-page":"1","article-title":"SpecROP: Speculative exploitation of ROP chains","volume-title":"Proc. 23rd Int. Symp. Res. Attacks, Intrusions Defenses (RAID)","author":"Bhattacharyya"},{"key":"ref59","volume-title":"Apache HTTP Server Benchmarking Tool","year":"2012"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/10005208\/10348582.pdf?arnumber=10348582","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,12]],"date-time":"2024-01-12T03:24:42Z","timestamp":1705029882000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10348582\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"references-count":59,"URL":"https:\/\/doi.org\/10.1109\/access.2023.3340680","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]}}}