Hola,
¿eres nuevo aquí?

Regístrate gratis y conecta tu empresa con financiación pública, partners y proyectos.

Tengo cuenta

Regístrate

Ver video

Ghostbuster

Financiado

Cerrado

A Principled Plan to Prevent Transient Execution Attacks

Ghostbuster is a research program to stop advanced “transient execution attacks”, which by themselves already rank among the most advanced attacks ever—by finding vulnerable code fragments, analyzing them for exploitability, and i... ver más

31/12/2029

STICHTING VU

2M€

Presupuesto del proyecto: 2M€

Líder del proyecto

STICHTING VU No se ha especificado una descripción o un objeto social para esta compañía.

TRL 4-5

Fecha límite participación Sin fecha límite de participación.

Financiación concedida El organismo HORIZON EUROPE notifico la concesión del proyecto el día 2025-01-01

ERC-2023-ADG: ERC ADVANCED GRANTS Scope:Objectives

I+D

Cerrada hace 1 año

0% 100%

Información adicional privada

No hay información privada compartida para este proyecto. Habla con el coordinador.

Participantes

STICHTING VU

Lider

Proyectos interesantes

REVEN-X1

Cybersecurity

Software

71K€ Cerrado

ProSVED

Cybersecurity

Software

Cerrado

HYDRANOS

Cybersecurity

Software

2M€ Cerrado

SHIELDS

Cybersecurity

Software

4M€ Cerrado

RTI2018-102043-B-I00

Cybersecurity

Software

303K€ Cerrado

CodeSan

Software

Cybersecurity

1M€ Cerrado

Conecta tu I+D

¿Tienes un proyecto y buscas un partner? Gracias a nuestro motor inteligente podemos recomendarte los mejores socios y ponerte en contacto con ellos. Te lo explicamos en este video

Duración del proyecto: 59 meses Fecha Inicio: 2025-01-01
Fecha Fin: 2029-12-31

Líder del proyecto

STICHTING VU No se ha especificado una descripción o un objeto social para esta compañía.

TRL 4-5

Presupuesto del proyecto 2M€

Fecha límite de participación Sin fecha límite de participación.

Descripción del proyecto Ghostbuster is a research program to stop advanced “transient execution attacks”, which by themselves already rank among the most advanced attacks ever—by finding vulnerable code fragments, analyzing them for exploitability, and injecting mitigations where needed. The vulnerabilities such as Spectre, Meltdown and others originate in vulnerable hardware and allow data leakage across all security boundaries. Recently, my team and I showed that even more advanced attacks exist by combining transient execution with traditional software exploitation. Today, we have no way of even detecting these hybrid attacks, let alone stop them. While we keep finding new variants, vendors have indicated that they cannot fix them all, as it would cripple performance. The hope is that developers identify and harden vulnerable code snippets (e.g., with instructions that stop transient execution). Unfortunately, finding vulnerable snippets is hard, beyond the abilities of top programmers, and even more so for the new hybrid attacks. Can it be done automatically?The challenge is daunting and involves all interaction between the code and a myriad of obscure CPU resources, requiring expertise in hardware, operating systems, fuzzing, program analysis, etc. State-of-the-art (and limited) tools do not even aim for mitigation and simply report potential issues—with many false positives and negatives. Unlike existing solutions that detect the snippets through pattern matching, Ghostbuster takes a principled approach and considers the fundamental conditions enabling attacks—without resorting to, say, symbolic execution, which scales poorly to large programs. It models the fundamental conditions of (steps of) an attack in terms of control + dataflow properties and translates the models into detectors. After detecting the code that looks vulnerable, it runs additional (possibly heavy-weight) exploitability analysis and, if need be, mitigates the issue by removing some of the enabling conditions

Conecta tu I+D

Entra hoy

¿Olvidé mi contraseña?

Financiación

Empresas

CTIs/Universidades

Proyectos

Investigadores