{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T16:13:31Z","timestamp":1783008811046,"version":"3.54.5"},"reference-count":64,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100007352","name":"State Secretariat for Education, Research and Innovation","doi-asserted-by":"publisher","award":["MB22.00057"],"award-info":[{"award-number":["MB22.00057"]}],"id":[{"id":"10.13039\/501100007352","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,5,18]]},"DOI":"10.1109\/sp63933.2026.00046","type":"proceedings-article","created":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T19:34:20Z","timestamp":1782934460000},"page":"1710-1727","source":"Crossref","is-referenced-by-count":1,"title":["VMSCAPE: Exposing and Exploiting Incomplete Branch Predictor Isolation in Cloud Environments"],"prefix":"10.1109","author":[{"given":"Jean-Claude","family":"Graf","sequence":"first","affiliation":[{"name":"ETHZurich,Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sandro","family":"R\u00fcegge","sequence":"additional","affiliation":[{"name":"ETHZurich,Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ali","family":"Hajiabadi","sequence":"additional","affiliation":[{"name":"ETHZurich,Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kaveh","family":"Razavi","sequence":"additional","affiliation":[{"name":"ETHZurich,Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00002"},{"key":"ref2","first-page":"3825","article-title":"RETBLEED: Arbitrary Speculative Code Execution with Return Instructions","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Wikner","year":"2022"},{"key":"ref3","first-page":"971","article-title":"Branch History Injection: On the Effectiveness of Hardware Mitigations Against Cross-Privilege Spectre-v2 Attacks","volume-title":"31st USENIX Security Symposium (USENIX Security 22)","author":"Barberis","year":"2022"},{"key":"ref4","first-page":"577","article-title":"InSpectre Gadget: Inspecting the Residual Attack Surface of Cross-privilege Spectre v2","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Wiebing","year":"2024"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SP61157.2025.00253"},{"key":"ref6","first-page":"7303","article-title":"Inception: Exposing New Attack Surfaces with Training in Transient Execution","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Trujillo","year":"2023"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/SP61157.2025.00089"},{"key":"ref8","article-title":"Branch Privilege Injection: Compromising Spectre v2 Hardware Mitigations by Exploiting Branch Predictor Race Conditions","volume-title":"USENIX Security","author":"R\u00fcegge","year":"2025"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/s12243-019-00703-z"},{"key":"ref10","volume-title":"AMD64 APM, Volume 2: System Programming","year":"2024"},{"key":"ref11","volume-title":"Intel Trust Domain Extension"},{"key":"ref12","volume-title":"Kernel virtual machine"},{"key":"ref13","volume-title":"QEMU: A generic and open source machine emulator and virtualizer"},{"key":"ref14","volume-title":"Intel64 SDM, Volume 3 (3A, 3B, 3C & 3D): System Programming Guide"},{"key":"ref15","volume-title":"Proxmox: Simplify your data center"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3620666.3651382"},{"key":"ref17","first-page":"2137","article-title":"Indirector: High-Precision Branch Target Injection Attacks Exploiting the Indirect Branch Predictor","volume-title":"33rd USENIX Security Symposium (USENIX Security 24)","author":"Li","year":"2024"},{"key":"ref18","volume-title":"Software Optimization Guide for the AMD Zen5 Microarchitecture","year":"2024"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3338466.3360287"},{"key":"ref20","first-page":"719","article-title":"FLUSH+RELOAD: A High Resolution, Low Noise, L3 Cache Side-Channel Attack","volume-title":"23rd USENIX Security Symposium (USENIX Security 14)","author":"Yarom","year":"2014"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/mdat.2024.3352537"},{"key":"ref22","volume-title":"Indirect Branch Restricted Speculation"},{"key":"ref23","volume-title":"Amd64 Technology Indirect Branch Control Extension","year":"2018"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4615-1681-1_8"},{"key":"ref25","volume-title":"Providing secret data to QEMU"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/DAC63849.2025.11133253"},{"key":"ref27","volume-title":"AMD64 APM, Volume 3: GeneralPurpose and System Instructions","year":"2024"},{"key":"ref28","volume-title":"Software Optimization Guide for the AMD Zen4 Microarchitecture","year":"2023"},{"key":"ref29","volume-title":"Speculative Return Stack Overflow (SRSO) - The Linux Kernel documentation"},{"key":"ref30","volume-title":"Technical Guidance for Mitigating Branch Type Confusion"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO.2016.7783743"},{"key":"ref32","volume-title":"The Linux Kernel documentation"},{"key":"ref33","volume-title":"Configure NUMA-aware VMs - Google Distributed Cloud (software only) for bare metal"},{"key":"ref34","volume-title":"How ESXi NUMA Scheduling Works"},{"key":"ref35","volume-title":"NUMA - Proxmox VE"},{"key":"ref36","volume-title":"Branch History Injection and Intra-mode Branch Target Injection"},{"key":"ref37","volume-title":"UnixBench test suite"},{"key":"ref38","volume-title":"Flexible I\/O Tester"},{"key":"ref39","volume-title":"Retpoline: A software construct for preventing branch-targetinjection"},{"key":"ref40","journal-title":"VirtualBox: Powerful open source virtualization For personal and enterprise use"},{"key":"ref41","volume-title":"Firecracker: Secure and fast microVMs for serverless computing"},{"key":"ref42","volume-title":"Crosvm: The ChromeOS Virtual Machine Monitor"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/3613424.3614275"},{"key":"ref44","volume-title":"A Comprehensive Study of Dynamic Global History Branch Prediction","author":"Michaud","year":"2001"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/RISP.1992.213271"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-68697-5_9"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1007\/11967668_15"},{"key":"ref48","first-page":"312","article-title":"On the power of simple branch prediction analysis","volume-title":"Proceedings of the 2nd ACM Symposium on Information, Computer and Communications Security, ser. ASIACCS \u201907","author":"Acii\u00e7mez"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1007\/s13389-016-0141-6"},{"key":"ref50","article-title":"Meltdown: Reading Kernel Memory from User Space","volume-title":"27th USENIX Security Symposium (USENIX Security 18)","author":"Lipp","year":"2018"},{"key":"ref51","first-page":"991","article-title":"Foreshadow: Extracting the Keys to the Intel SGX Kingdom with Transient Out-of-Order Execution","volume-title":"27th USENIX Security Symposium (USENIX Security 18)","author":"Bulck","year":"2018"},{"key":"ref52","volume-title":"Speculative buffer overflows: Attacks and defenses","author":"Kiriansky","year":"2018"},{"key":"ref53","volume-title":"Lazyfp: Leaking fpu register state using microarchitectural side-channels","author":"Stecklina","year":"2018"},{"key":"ref54","first-page":"7179","article-title":"Downfall: Exploiting speculative data gathering","volume-title":"32nd USENIX Security Symposium (USENIX Security 23)","author":"Moghimi"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00087"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363219"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354252"},{"key":"ref58","first-page":"249","article-title":"A systematic evaluation of transient execution attacks and defenses","volume-title":"28th USENIX Security Symposium (USENIX Security 19)","author":"Canella"},{"key":"ref59","volume-title":"Google CPU security research"},{"key":"ref60","first-page":"1451","article-title":"Rage against the machine clear: A systematic analysis of machine clears and their implications for transient execution attacks","volume-title":"30th USENIX Security Symposium (USENIX Security 21)","author":"Ragab","year":"2021"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243761"},{"key":"ref62","article-title":"Spring: Spectre returning in the browser with speculative load queuing and deep stacks","author":"Wikner","year":"2022","journal-title":"WOOT"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/SP61157.2025.00098"},{"key":"ref64","article-title":"Flop: Breaking the apple m3 cpu via false load output predictions","volume-title":"USENIX Security","author":"Kim","year":"2025"}],"event":{"name":"2026 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2026,5,18]]},"end":{"date-parts":[[2026,5,21]]}},"container-title":["2026 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11573355\/11573356\/11573554.pdf?arnumber=11573554","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T05:39:33Z","timestamp":1782970773000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11573554\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,18]]},"references-count":64,"URL":"https:\/\/doi.org\/10.1109\/sp63933.2026.00046","relation":{},"subject":[],"published":{"date-parts":[[2026,5,18]]}}}