{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,6]],"date-time":"2026-06-06T01:17:15Z","timestamp":1780708635930,"version":"3.54.1"},"reference-count":82,"publisher":"IEEE","license":[{"start":{"date-parts":[[2023,5,1]],"date-time":"2023-05-01T00:00:00Z","timestamp":1682899200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-009"},{"start":{"date-parts":[[2023,5,1]],"date-time":"2023-05-01T00:00:00Z","timestamp":1682899200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-001"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023,5]]},"DOI":"10.1109\/sp46215.2023.10179283","type":"proceedings-article","created":{"date-parts":[[2023,7,21]],"date-time":"2023-07-21T17:18:15Z","timestamp":1689959895000},"page":"2288-2305","source":"Crossref","is-referenced-by-count":7,"title":["DevIOus: Device-Driven Side-Channel Attacks on the IOMMU"],"prefix":"10.1109","author":[{"given":"Taehun","family":"Kim","sequence":"first","affiliation":[{"name":"Korea University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hyeongjin","family":"Park","sequence":"additional","affiliation":[{"name":"Korea University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Seokmin","family":"Lee","sequence":"additional","affiliation":[{"name":"Korea University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Seunghee","family":"Shin","sequence":"additional","affiliation":[{"name":"The State University of New York at Binghamton"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Junbeom","family":"Hur","sequence":"additional","affiliation":[{"name":"Korea University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Youngjoo","family":"Shin","sequence":"additional","affiliation":[{"name":"Korea University"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/RTAS.2013.6531080"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3466752.3480093"},{"key":"ref3","article-title":"Alexa Top Websites","year":"2022"},{"key":"ref4","article-title":"Amd i\/o virtualization technology (iommu) specification","year":"2021"},{"key":"ref5","article-title":"Crail: High-performance distributed data store","year":"2018"},{"key":"ref6","article-title":"Subverting windows 7 x64 kernel with dma attacks","author":"Aumaitre","year":"2010","journal-title":"HITBSecConf"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/FMEC.2018.8364038"},{"key":"ref8","article-title":"Firewire: all your memory are belong to us","author":"Becher","year":"2005","journal-title":"CanSecWest"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813649"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/2420950.2420961"},{"key":"ref11","article-title":"Hit by a bus: Physical access attacks with firewire","author":"Boileau","year":"2006","journal-title":"Ruxcon"},{"key":"ref12","volume-title":"Integrating dma attacks in exploitation frameworks","author":"Breuk","year":"2012"},{"key":"ref13","first-page":"1967","article-title":"Reload+refresh: Abusing cache replacement policies to perform stealthy cache attacks","volume-title":"USENIX Security Symposium","author":"Briongos"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2017.2729545"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.3390\/app10030984"},{"key":"ref16","article-title":"Analyze runtime performance"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/1807128.1807152"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3307650.3322238"},{"key":"ref19","article-title":"Direct memory attack the kernel","author":"Frisk","year":"2016","journal-title":"DEFCON"},{"key":"ref20","first-page":"519","article-title":"When cloud storage meets RDMA","author":"Gao","year":"2021","journal-title":"NSDI"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/233551.233553"},{"key":"ref22","first-page":"955","article-title":"Translation leak-aside buffer: Defeating cache side-channel protections with TLB attacks","volume-title":"USENIX Security Symposium","author":"Gras"},{"key":"ref23","first-page":"217","article-title":"Strong and efficient cache side-channel protection using hardware transactional memory","volume-title":"USENIX Security Symposium","author":"Gruss"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-40667-1_14"},{"key":"ref25","first-page":"897","article-title":"Cache template attacks: Automating attacks on inclusive last-level caches","volume-title":"USENIX Security Symposium","author":"Gruss"},{"key":"ref26","article-title":"Address translation technologies","volume-title":"US Patent","author":"Guo","year":"2020"},{"key":"ref27","article-title":"Intel\u00ae xeon\u00ae processor scalable memory family uncore performance monitoring","year":"2017"},{"key":"ref28","article-title":"Utilizing the intel\u00ae xeon\u00ae processor scalabe family iio performance monitoring event","year":"2019"},{"key":"ref29","article-title":"3rd gen intel\u00ae xeon\u00ae processor scalable family, codename ice lake, uncore performance monitoring","year":"2021"},{"key":"ref30","article-title":"Intel\u00ae virtualization technology for directed i\/o","year":"2022"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.42"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ICPP.2015.79"},{"key":"ref33","article-title":"Xen episode iv: The guests still strike back","author":"Jaeger","year":"2011","journal-title":"Cloud Computing Security Summer Term"},{"key":"ref34","article-title":"Privacy leakage via write-access patterns to the main memory","volume-title":"Master\u2019s Theses","author":"John","year":"2017"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/2619239.2626299"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/2379616.2379617"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP48549.2020.00027"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00082"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/HPCA.2016.7446082"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.43"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/HOTI.2014.15"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23194"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3464298.3476129"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/LADC.2016.31"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1186\/s13173-017-0066-7"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1145\/3214292.3214293"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2988370"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/3123939.3124538"},{"key":"ref49","article-title":"RDMA Aware Programming User Manual v1.7"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813708"},{"key":"ref51","article-title":"Security analysis of hybrid intel cpu\/fpga platforms using iommus against i\/o attacks","author":"Peglow","year":"2020"},{"key":"ref52","first-page":"1451","article-title":"Rage against the machine clear: A systematic analysis of machine clears and their implications for transient execution attacks","volume-title":"USENIX Security Symposium","author":"Ragab"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00020"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.17487\/rfc5040"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/HPCC-SmartCity-DSS.2017.30"},{"key":"ref56","first-page":"1379","article-title":"MIRAGE: Mitigating Conflict-Based cache attacks with a practical Fully-Associative design","volume-title":"USENIX Security Symposium","author":"Saileshwar"},{"key":"ref57","first-page":"989","article-title":"Tlb;dr: Enhancing tlb-based attacks with tlb desynchronized reverse engineering","volume-title":"USENIX Security Symposium","author":"Saileshwar"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/SysSec.2011.10"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23027"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354252"},{"key":"ref61","article-title":"Timing analysis of keystrokes and timing attacks on SSH","volume-title":"USENIX Security Symposium","author":"Song"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-37300-8_2"},{"issue":"1","key":"ref63","first-page":"38","article-title":"Crail: A high-performance i\/o architecture for distributed data processing","volume":"40","author":"Stuedi","year":"2017","journal-title":"IEEE Bulletin of the Technical Committee on Data Engineering"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00059"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/ISCA45697.2020.00065"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1145\/3482898.3483363"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/3579856.3582838"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1145\/2103799.2103820"},{"key":"ref69","first-page":"693","article-title":"Pythia: remote oracles for the masses","volume-title":"USENIX Security Symposium","author":"Tsai"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00087"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1145\/2670979.2671002"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1145\/2807591.2807614"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1145\/3468520"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.5555\/3361338.3361385"},{"key":"ref75","volume-title":"Subverting the xen hypervisor","author":"Wojtczuk","year":"2008"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2006.11.001"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2022.3147960"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1145\/3302424.3303975"},{"key":"ref79","first-page":"719","article-title":"Flush+reload: A high resolution, low noise, l3 cache side-channel attack","volume-title":"USENIX Security Symposium","author":"Yarom"},{"key":"ref80","first-page":"17","article-title":"Peeping tom in the neighborhood: Keystroke eavesdropping on multi-user systems","volume-title":"USENIX Security Symposium","author":"Zhang"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-45719-2_6"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1145\/3038228.3038233"}],"event":{"name":"2023 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2023,5,21]]},"end":{"date-parts":[[2023,5,25]]}},"container-title":["2023 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10179215\/10179280\/10179283.pdf?arnumber=10179283","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,7,20]],"date-time":"2024-07-20T05:18:22Z","timestamp":1721452702000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10179283\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,5]]},"references-count":82,"URL":"https:\/\/doi.org\/10.1109\/sp46215.2023.10179283","relation":{},"subject":[],"published":{"date-parts":[[2023,5]]}}}