octopus/README.md
2022-01-27 15:36:02 +01:00

1.3 KiB

OCTOPUS

Samuel AUBERTIN - EURECOM - 2022

SPECTRE Octopus Logo

OCTOPUS is a Spectre V1 (Bounds Check Bypass) + V1 (Branch Target Injection) compiler flag tester.

It measures the success rate of the attacks using different compilers:

  • GCC
  • CLANG

And compilation/linking flags such as:

  • Optimisation levels (-O)
  • Static linking
  • RETPOLINE

Dependencies

  • clang and lld
  • gcc
  • sftp
  • uuid
  • The libC static symbols glibc-static

Execution

make

Build only

make build

Results aggregation

Results are automatically uploaded to a server with sftp using a dedicated account.

Here is an exhaustive list of the data sent:

  • CPU model name and microcode version.
  • Kernel version and compilation date.
  • GCC and clang versions.
  • The list of mitigations enabled at runtime.
  • The cache timings of the processor computed by the calibrate_threshold() function.
  • Each spectre execution success rate.

NONE of this data will be used for anyhting else except this experiment.

Sources