Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Speculative Buffer Overflows: Attacks and Defenses   Practical attacks that exploit speculative execution can leak confidential
information via microarchitectural side channels. The recently-demonstrated
Spectre attacks leverage speculative loads which circumvent access checks to
read memory-resident secrets, transmitting them to an attacker using cache
timing or other covert communication channels.
  We introduce Spectre1.1, a new Spectre-v1 variant that leverages speculative
stores to create speculative buffer overflows. Much like classic buffer
overflows, speculative out-of-bounds stores can modify data and code pointers.
Data-value attacks can bypass some Spectre-v1 mitigations, either directly or
by redirecting control flow. Control-flow attacks enable arbitrary speculative
code execution, which can bypass fence instructions and all other software
mitigations for previous speculative-execution attacks. It is easy to construct
return-oriented-programming (ROP) gadgets that can be used to build alternative
attack payloads.
  We also present Spectre1.2: on CPUs that do not enforce read/write
protections, speculative stores can overwrite read-only data and code pointers
to breach sandboxes.
  We highlight new risks posed by these vulnerabilities, discuss possible
software mitigations, and sketch microarchitectural mechanisms that could serve
as hardware defenses. We have not yet evaluated the performance impact of our
proposed software and hardware mitigations. We describe the salient
vulnerability features and additional hypothetical attack scenarios only to the
detail necessary to guide hardware and software vendors in threat analysis and
mitigations. We advise users to refer to more user-friendly vendor
recommendations for mitigations against speculative buffer overflows or
available patches.

25
The categories of this paper are: patt-sol
33
The categories of this paper are: plasm-ph
28
The categories of this paper are: alg-geom
27
The categories of this paper are: comp-gas
8
The categories of this paper are: hep-ex
21
The categories of this paper are: adap-org
31
The categories of this paper are: ao-sci
6
The categories of this paper are: astro-ph
20
The categories of this paper are: acc-phys
30
The categories of this paper are: q-alg
16
The categories of this paper are: stat
3
The categories of this paper are: physics
15
The categories of this paper are: nucl-ex
29
The categories of this paper are: funct-an
9
The categories of this paper are: nlin
4
The categories of this paper are: cond-mat