{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,22]],"date-time":"2026-09-22T17:23:32Z","timestamp":1790097812789,"version":"4.0.1"},"reference-count":44,"publisher":"Association for Computing Machinery (ACM)","issue":"1","license":[{"start":{"date-parts":[[2019,1,8]],"date-time":"2019-01-08T00:00:00Z","timestamp":1546905600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100007040","name":"SUTD","doi-asserted-by":"crossref","award":["SRIS17123"],"award-info":[{"award-number":["SRIS17123"]}],"id":[{"id":"10.13039\/501100007040","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Singapore Ministry of Education (MOE) Academic Research","award":["MOE2018-T2-1-098"],"award-info":[{"award-number":["MOE2018-T2-1-098"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Embed. Comput. Syst."],"published-print":{"date-parts":[[2019,1,31]]},"abstract":"<jats:p>Cache attacks allow attackers to infer the properties of a secret execution by observing cache hits and misses. But how much information can actually leak through such attacks? For a given program, a cache model, and an input, our CHALICE framework leverages symbolic execution to compute the amount of information that can possibly leak through cache attacks. At the core of CHALICE is a novel approach to quantify information leakage that can highlight critical cache side-channel leakage on arbitrary binary code. In our evaluation on real-world programs from OpenSSL and Linux GDK libraries, CHALICE effectively quantifies information leakage: For an AES-128 implementation on Linux, for instance, CHALICE finds that a cache attack can leak as much as 127 out of 128 bits of the encryption key.<\/jats:p>","DOI":"10.1145\/3288758","type":"journal-article","created":{"date-parts":[[2019,1,8]],"date-time":"2019-01-08T15:53:12Z","timestamp":1546962792000},"page":"1-27","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":12,"title":["Quantifying the Information Leakage in Cache Attacks via Symbolic Execution"],"prefix":"10.1145","volume":"18","author":[{"given":"Sudipta","family":"Chattopadhyay","sequence":"first","affiliation":[{"name":"Singapore University of Technology and Design, Singapore"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Moritz","family":"Beck","sequence":"additional","affiliation":[{"name":"Saarland University"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ahmed","family":"Rezine","sequence":"additional","affiliation":[{"name":"Link\u00f6ping University, Link\u00f6ping"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Andreas","family":"Zeller","sequence":"additional","affiliation":[{"name":"Saarland University"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2019,1,8]]},"reference":[{"key":"e_1_2_1_1_1","volume-title":"d.}. FourQLib Library. Retrieved","year":"2017"},{"key":"e_1_2_1_2_1","volume-title":"Retrieved on","year":"2018"},{"key":"e_1_2_1_3_1","volume-title":"Retrieved on","author":"Implementation AES","year":"2018"},{"key":"e_1_2_1_4_1","volume-title":"Retrieved on","author":"Library SSL","year":"2018"},{"key":"e_1_2_1_5_1","volume-title":"Retrieved on","author":"Davis UC","year":"2018"},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1007\/11935308_9"},{"key":"e_1_2_1_7_1","unstructured":"Jos\u00e9 Bacelar Almeida Manuel Barbosa Gilles Barthe Fran\u00e7ois Dupressoir and Michael Emmi. 2016. Verifying constant-time implementations. In USENIX. 53--70.   Jos\u00e9 Bacelar Almeida Manuel Barbosa Gilles Barthe Fran\u00e7ois Dupressoir and Michael Emmi. 2016. Verifying constant-time implementations. In USENIX. 53--70."},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/2.982917"},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660283"},{"key":"e_1_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSTW.2017.16"},{"key":"e_1_2_1_11_1","unstructured":"Daniel J. Bernstein. 2005. Cache-timing attacks on AES.  Daniel J. Bernstein. 2005. Cache-timing attacks on AES."},{"key":"e_1_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/2993600.2993607"},{"key":"e_1_2_1_13_1","volume-title":"Pasareanu","author":"Borges Mateus","year":"2017"},{"key":"e_1_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-10366-7_39"},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/1346281.1346322"},{"key":"e_1_2_1_16_1","volume-title":"Vardi","author":"Chakraborty Supratik","year":"2016"},{"key":"e_1_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-54580-5_3"},{"key":"e_1_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/3127041.3127044"},{"key":"e_1_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11241-013-9178-0"},{"key":"e_1_2_1_20_1","volume-title":"Thomas","author":"Cover Thomas M.","year":"2006"},{"key":"e_1_2_1_21_1","doi-asserted-by":"crossref","unstructured":"Stephen Crane Andrei Homescu Stefan Brunthaler Per Larsen and Michael Franz. 2015. Thwarting cache side-channel attacks through dynamic software diversity. In NDSS.  Stephen Crane Andrei Homescu Stefan Brunthaler Per Larsen and Michael Franz. 2015. Thwarting cache side-channel attacks through dynamic software diversity. In NDSS.","DOI":"10.14722\/ndss.2015.23264"},{"key":"e_1_2_1_22_1","doi-asserted-by":"crossref","unstructured":"John Demme Robert Martin Adam Waksman and Simha Sethumadhavan. 2012. Side-channel vulnerability factor: A metric for measuring information leakage. In ISCA. 106--117.   John Demme Robert Martin Adam Waksman and Simha Sethumadhavan. 2012. Side-channel vulnerability factor: A metric for measuring information leakage. In ISCA. 106--117.","DOI":"10.1145\/2366231.2337172"},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/2756550"},{"key":"e_1_2_1_24_1","volume-title":"27th USENIX Security Symposium (USENIX Security\u201918)","author":"Moritz"},{"key":"e_1_2_1_25_1","volume-title":"40th IEEE Symposium on Security and Privacy (S8P\u201919)","author":"Paul"},{"key":"e_1_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1007\/s13389-016-0141-6"},{"key":"e_1_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/1065010.1065036"},{"key":"e_1_2_1_28_1","unstructured":"Daniel Gruss Raphael Spreitzer and Stefan Mangard. 2015. Cache template attacks: Automating attacks on inclusive last-level caches. In USENIX Security. 897--912.   Daniel Gruss Raphael Spreitzer and Stefan Mangard. 2015. Cache template attacks: Automating attacks on inclusive last-level caches. In USENIX Security. 897--912."},{"key":"e_1_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.11"},{"key":"e_1_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2011.22"},{"key":"e_1_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315282"},{"key":"e_1_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-31424-7_40"},{"key":"e_1_2_1_33_1","volume-title":"USENIX Security Symposium. 549--564","author":"Lipp Moritz","year":"2016"},{"key":"e_1_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.43"},{"key":"e_1_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/2166956.2166957"},{"key":"e_1_2_1_36_1","doi-asserted-by":"crossref","unstructured":"Corina S. Pasareanu Quoc-Sang Phan and Pasquale Malacaria. 2016. Multi-run side-channel analysis using symbolic execution and max-SMT. In CSF. 387--400.  Corina S. Pasareanu Quoc-Sang Phan and Pasquale Malacaria. 2016. Multi-run side-channel analysis using symbolic execution and max-SMT. In CSF. 387--400.","DOI":"10.1109\/CSF.2016.34"},{"key":"e_1_2_1_37_1","first-page":"1191","article-title":"A formal analysis of prefetching in profiled cache-timing attacks on block ciphers","volume":"2015","author":"Rebeiro Chester","year":"2015","journal-title":"IACR Cryptology ePrint Archive"},{"key":"e_1_2_1_38_1","volume-title":"On the Foundations of Quantitative Information Flow","author":"Smith Geoffrey"},{"key":"e_1_2_1_39_1","doi-asserted-by":"crossref","unstructured":"Deian Stefan Pablo Buiras Edward Z. Yang Amit Levy David Terei Alejandro Russo and David Mazi\u00e8res. 2013. Eliminating cache-based timing attacks with instruction-based scheduling. In ESORICS. 718--735.  Deian Stefan Pablo Buiras Edward Z. Yang Amit Levy David Terei Alejandro Russo and David Mazi\u00e8res. 2013. Eliminating cache-based timing attacks with instruction-based scheduling. In ESORICS. 718--735.","DOI":"10.1007\/978-3-642-40203-6_40"},{"key":"e_1_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1023\/A:1008141130870"},{"key":"e_1_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.5555\/2724966.2725064"},{"key":"e_1_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/1250662.1250723"},{"key":"e_1_2_1_43_1","volume-title":"USENIX Security Symposium. 719--732","author":"Yarom Yuval","year":"2014"},{"key":"e_1_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1007\/s13389-017-0152-y"}],"container-title":["ACM Transactions on Embedded Computing Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3288758","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3288758","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T01:02:23Z","timestamp":1750208543000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3288758"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,1,8]]},"references-count":44,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2019,1,31]]}},"alternative-id":["10.1145\/3288758"],"URL":"https:\/\/doi.org\/10.1145\/3288758","relation":{},"ISSN":["1539-9087","1558-3465"],"issn-type":[{"value":"1539-9087","type":"print"},{"value":"1558-3465","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019,1,8]]},"assertion":[{"value":"2017-12-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2018-10-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2019-01-08","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}