University of Cambridge > Talks.cam > Churchill CompSci Talks > Spectre and Meltdown

Spectre and Meltdown

Add to your list(s) Download to your calendar using vCal

If you have a question about this talk, please contact Matthew Ireland.

When they were publicly disclosed Spectre and Meltdown were described as an “absolute disaster” and prompted statements and blog posts from numerous tech companies describing the effects on their customers. The reason: Spectre and Meltdown both broke the fundamental security assumption of isolation and were both independent of the Operating System on which they were being run. Not only were the vulnerabilities not the result of a bug in software, but they could be exploited by Javascript code running in a browser and affected around 80% of modern desktops, including all but two variants of Intel processors produced after 19951.

This talk will describe the background and details of one variant of Spectre, it will then describe Meltdown and will finish with a look at the interesting implementation details required for a working attack.

[1] https://meltdownattack.com/

This talk is part of the Churchill CompSci Talks series.

Tell a friend about this talk:

This talk is included in these lists:

Note that ex-directory lists are not shown.

 

© 2006-2024 Talks.cam, University of Cambridge. Contact Us | Help and Documentation | Privacy and Publicity