Bos Lab

Research focus

ERC Advanced Grant · 2023

A Principled Plan to Prevent Transient Execution Attacks

Ghostbuster is a research program to stop advanced “transient execution attacks”, which by themselves already rank among the most advanced attacks ever—by finding vulnerable code fragments, analyzing them for exploitability, and injecting mitigations where needed. The vulnerabilities such as Spectre, Meltdown and others originate in vulnerable hardware and allow data leakage across all security boundaries. Recently, my team and I showed that even more advanced attacks exist by combining transient execution with traditional software exploitation. Today, we have no way of even detecting these hybrid attacks, let alone stop them. While we keep finding new variants, vendors have indicated that…

From the public funding record at EU CORDIS. Describes the funded project, not the reviews below.