On the Detectability of Control Flow Using Memory Access Patterns
Robert Buhren, Felicitas Hetzelt, Niklas Pirnay · 2018
Shielding systems such as AMD's Secure Encrypted Virtualization aim to protect a virtual machine from a higher privileged entity such as the hypervisor. A cornerstone of these systems is the ability to protect the memory from unauthorized accesses. Despite this protection mechanism, previous attacks leveraged the control over memory resources to infer control flow of applications running in a shielded system.