Bohdan Trach

SpecFuzz: Bringing Spectre-type vulnerabilities to the surface

2019 · arXiv (Cornell University)

SpecFuzz is the first tool that enables dynamic testing for speculative execution vulnerabilities (e.g., Spectre). The key is a novel concept of speculation exposure: The program is instrumented to simulate speculative execution in software by …