arXiv Science⌕ Search
Home/Archive/arXiv

arXiv · 2509.03879

ShieldMMU: Detecting and Defending against Controlled-Channel Attacks in Shielding Memory System

Gang Liu·Ningjie Li·Cen Chen
View original source ↗Read source document ↗Export metadata ↓

Abstract

Intel SGX and hypervisors isolate non-privileged programs from other software, ensuring confidentiality and integrity. However, side-channel attacks continue to threaten Intel SGX's security, enabling malicious OS to manipulate PTE present bits, induce page faults, and steal memory access traces. Despite extensive research, existing defenses focus on detection or rely on impractical solutions. This paper presents ShieldMMU, a comprehensive solution for mitigating controlled channel attacks, balancing compatibility, performance, and usability. Leveraging a Merkle Tree-inspired Defense Tree (DD-Tree), ShieldMMU protects PTE integrity by detecting, locating, and restoring attacked PTEs. It identifies MMU page table lookup events and side-channel attacks, promptly restoring PTE parameters to prevent page fault traps and ensure secure non-privileged application operation within SGX. Our experiments confirm ShieldMMU's enhanced security and acceptable latency performance.

Explore related subjects

cs.CRcs.SYeess.SY

Keep this discovery

Explore connections, maps & timelines

BibTeXRIS

Gang Liu, Ningjie Li, Cen Chen. 2025-09-04. ShieldMMU: Detecting and Defending against Controlled-Channel Attacks in Shielding Memory System. https://arxiv.org/abs/2509.03879

Cite the original work for its findings. Save a collection to share your selection of sources.

KEEP EXPLORING

Related papers

arXiv2026

Protect Your Score: Contact Tracing With Differential Privacy Guarantees

The pandemic in 2020 and 2021 had enormous economic and societal consequences, and studies show that contact tracing algorithms can be key in the early containment of the virus. While large strides have been made towards more effective contact tracing algorithms, we argue that privacy concerns currently hold deployment back. The essence of a contact tracing algorithm constitutes the communication of a risk score. Yet, it is precisely the communication and release of this score to a user that an adversary can leverage to gauge the private health status of an individual. We pinpoint a realistic attack scenario and propose a contact tracing algorithm with differential privacy guarantees against this attack. The algorithm is tested on the two most widely used agent-based COVID19 simulators and demonstrates superior performance in a wide range of settings. Especially for realistic test scenarios and while releasing each risk score with epsilon=1 differential privacy, we achieve a two to ten-fold reduction in the infection rate of the virus. To the best of our knowledge, this presents the first contact tracing algorithm with differential privacy guarantees when revealing risk scores for COVID19.

cs.CR↗
arXiv2026

Timestamp Manipulation: Incentive Attacks on Timestamp-Based Proof-of-Work Blockchains with Minimal Additional Risk

Nakamoto consensus is the most widely adopted decentralized consensus mechanism in cryptocurrency systems. Since its proposal in 2008, many studies have investigated incentive attacks, where the adversary aims to earn more rewards than its fair share but the security properties are not violated. One notable example is the recent Riskless Uncle Maker (RUM) attack on timestamp-based Nakamoto blockchains (CCS'23) such as Ethereum 1.x (deprecated in Sep 2022) and Ethereum Classic (still active) and EthereumPoW (still active). Specifically, the RUM attack shows that an adversary with 25\% relative hash power can achieve a normalized profit share of 26.12\%. In this work, we propose two new incentive attacks on timestamp-based Nakamoto consensus: Unrestricted Uncle Maker (UUM) and Staircase-Unrestricted Uncle Maker (SUUM). Compared with RUM, both attacks achieve higher profit without risking reward loss. We demonstrate through theoretical analysis and experimental validation that if an adversary controls 25\% relative hash power, it can achieve a normalized profit share of 28.41\% and 33.30\% in UUM and SUUM, respectively. We further conduct an empirical analysis on three major ETH 1.x-based blockchains, namely Ethereum 1.x, Ethereum Classic, and EthereumPoW. Our on-chain observations reveal persistent SUUM-style behavior in four large mining pools. Compared to honest mining, the estimated additional revenues gained by these mining pools are nearly three million USD (\$2,961,078 to be specific).

cs.CR↗
arXiv2026

Federated Learning in the Wild: A Comparative Study for Cybersecurity under Non-IID and Unbalanced Settings

Machine Learning (ML) techniques have shown strong potential for network traffic analysis; however, their effectiveness depends on access to representative, up-to-date datasets, which is limited in cybersecurity due to privacy and data-sharing restrictions. To address this challenge, Federated Learning (FL) has recently emerged as a novel paradigm that enables collaborative training of ML models across multiple clients while ensuring that sensitive data remains local. Nevertheless, Federated Averaging (FedAvg), the canonical FL algorithm, has shown poor convergence in heterogeneous environments characterised by non-independent and identically distributed (i.i.d.) data distributions and unbalanced dataset sizes across clients, conditions frequently observed in cybersecurity contexts. To overcome these challenges, several alternative FL algorithms have been developed, yet their applicability to network intrusion detection remains insufficiently explored. This study systematically evaluates a range of FL algorithms in the context of network intrusion detection for DDoS attacks. Using a dataset of recent network attacks, the evaluation considers detection performance, training time, and communication overhead under non-i.i.d. settings, providing practical insights into the selection of FL solutions for network intrusion detection.

cs.CR↗