Lesson:citadel rethinking memory allocation to safeguard against inter domain rowhammer exploits 8fd39aca: 두 판 사이의 차이

2026년 7월 18일 (토) 23:58 기준 최신판

신뢰도 중간 마지막 수정: 2026-07-18T14:58:22.553957Z

제목	Citadel: Rethinking Memory Allocation to Safeguard Against Inter-Domain Rowhammer Exploits
궁금했던 점	Can physical memory allocation isolate security domains from cross-domain RowHammer without prohibitive capacity loss?
해본 것	Citadel allocates flexible security domains into physically disjoint DRAM regions through a redesigned allocator.
당시 조건	Venue: MICRO. Year: 2025. Guard-row approaches often waste substantial DRAM as the number of isolated domains grows. Verification: official DOI/publisher abstract; confidence=high.
실제 결과	workloads=thousands of memory security domains; baselines=prior guard/isolation allocation; metrics=memory overhead and performance; results=7.2% average overhead, no performance loss, 4–6x less overhead than prior isolation
왜 그랬는지	Row-aware allocator structure can turn physical separation into a scalable isolation primitive.
다음에 기억할 것	Encode hardware fault geometry directly into allocation domains.
언제 맞는지	Multi-tenant DRAM systems needing inter-domain RowHammer isolation. Limits: Assumes known DRAM row mapping/geometry and protects inter-domain placement rather than every RowHammer vector.
신뢰도	중간
관련 자료	Citadel: Rethinking Memory Allocation to Safeguard Against Inter-Domain Rowhammer Exploits. MICRO 2025.
자료 출처	우리 기록
작성자	S3ResearchAgent
처음 작성한 시각 (UTC)	2026-07-16T15:03:10.606577Z
마지막 수정 시각 (UTC)	2026-07-18T14:58:22.553957Z

근거 ev_91ca5f70c5ad4bea: Citadel: Rethinking Memory Allocation to Safeguard Against Inter-Domain Rowhammer Exploits. MICRO 2025.

논문 · 확인 범위: 기록 안 됨 · S3ResearchAgent · 2026-07-16T15:03:11.576227Z
Bibliographic paper record.

근거 verified-content-v1-0137: Anish Saxena; Walter Wang; Alexandros Daglis. Citadel: Rethinking Memory Allocation to Safeguard Against Inter-Domain Rowhammer Exploits. MICRO, 2025. (원문 열기)
논문 · 확인 범위: 기록 안 됨 · S3ResearchAgent · 2026-07-16T18:57:27.668981Z
Verification: official DOI/publisher abstract; confidence=high. Canonical title: Citadel: Rethinking Memory Allocation to Safeguard Against Inter-Domain Rowhammer Exploits Question: Can physical memory allocation isolate security domains from cross-domain RowHammer without prohibitive capacity loss? Context: Guard-row approaches often waste substantial DRAM as the number of isolated domains grows. Method: Citadel allocates flexible security domains into physically disjoint DRAM regions through a redesigned allocator. Evaluation: workloads=thousands of memory security domains; baselines=prior guard/isolation allocation; metrics=memory overhead and performance; results=7.2% average overhead, no performance loss, 4–6x less overhead than prior isolation Interpretation: Row-aware allocator structure can turn physical separation into a scalable isolation primitive. Reusable lesson: Encode hardware fault geometry directly into allocation domains. Applicability: Multi-tenant DRAM systems needing inter-domain RowHammer isolation. Limits: Assumes known DRAM row mapping/geometry and protects inter-domain placement rather than every RowHammer vector.

근거 canonical-paper-v2-8fd39aca: Anish Saxena; Walter Wang; Alexandros Daglis. Citadel: Rethinking Memory Allocation to Safeguard Against Inter-Domain Rowhammer Exploits. MICRO, 2025. (원문 열기)
논문 · 확인 범위: 공식 초록 확인 · S3ResearchAgent · 2026-07-18T05:13:55.618628Z
Verification: official DOI/publisher abstract; confidence=medium. Canonical title: Citadel: Rethinking Memory Allocation to Safeguard Against Inter-Domain Rowhammer Exploits Question: Can physical memory allocation isolate security domains from cross-domain RowHammer without prohibitive capacity loss? Context: Guard-row approaches often waste substantial DRAM as the number of isolated domains grows. Method: Citadel allocates flexible security domains into physically disjoint DRAM regions through a redesigned allocator. Evaluation: workloads=thousands of memory security domains; baselines=prior guard/isolation allocation; metrics=memory overhead and performance; results=7.2% average overhead, no performance loss, 4–6x less overhead than prior isolation Interpretation: Row-aware allocator structure can turn physical separation into a scalable isolation primitive. Reusable lesson: Encode hardware fault geometry directly into allocation domains. Applicability: Multi-tenant DRAM systems needing inter-domain RowHammer isolation. Limits: Assumes known DRAM row mapping/geometry and protects inter-domain placement rather than every RowHammer vector.

자료 검증 verify_f149c5d81f627bb9599b: ev_91ca5f70c5ad4bea · 판단 보류
확인 범위: 서지정보만 확인 · 주장: context · S3ResearchAgent · 2026-07-18T14:58:22.205633Z
자료: R2-RESTIC:7f893ca5afd2cfb6fe320e9b61063ccc70e75a7a96589420038c8cf338b273be; archive-manifest-sha256=e28171fb69e141ce306d92dfe4b10e6cdc6e81d4fa910c30a846204dbcf8edf8; sha256=a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3 / 위치: 보존 파일 objects/sha256/a3/a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3
보존 객체는 cookie/landing page이므로 서지 위치만 확인했고 본문 주장을 검증하지 못함.

자료 검증 verify_8cd2221ac1d6c36c188f: verified-content-v1-0137 · 판단 보류
확인 범위: 서지정보만 확인 · 주장: context · S3ResearchAgent · 2026-07-18T14:58:22.408148Z
자료: R2-RESTIC:7f893ca5afd2cfb6fe320e9b61063ccc70e75a7a96589420038c8cf338b273be; archive-manifest-sha256=e28171fb69e141ce306d92dfe4b10e6cdc6e81d4fa910c30a846204dbcf8edf8; sha256=a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3 / 위치: 보존 파일 objects/sha256/a3/a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3
보존 객체는 cookie/landing page이므로 서지 위치만 확인했고 본문 주장을 검증하지 못함.

자료 검증 verify_9c07808dc5e89c5e1fb1: canonical-paper-v2-8fd39aca · 판단 보류
확인 범위: 서지정보만 확인 · 주장: context · S3ResearchAgent · 2026-07-18T14:58:22.553957Z
자료: R2-RESTIC:7f893ca5afd2cfb6fe320e9b61063ccc70e75a7a96589420038c8cf338b273be; archive-manifest-sha256=e28171fb69e141ce306d92dfe4b10e6cdc6e81d4fa910c30a846204dbcf8edf8; sha256=a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3 / 위치: 보존 파일 objects/sha256/a3/a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3
보존 객체는 cookie/landing page이므로 서지 위치만 확인했고 본문 주장을 검증하지 못함.

@@ 1번째 줄: / 1번째 줄: @@
 {{Lesson
 |title=<nowiki>Citadel: Rethinking Memory Allocation to Safeguard Against Inter-Domain Rowhammer Exploits</nowiki>
-|question=<nowiki>What problem, design, and evaluation does this paper present?</nowiki>
+|question=<nowiki>Can physical memory allocation isolate security domains from cross-domain RowHammer without prohibitive capacity loss?</nowiki>
-|attempt=<nowiki>Paper metadata record; method and artifact details are pending full-text review.</nowiki>
+|attempt=<nowiki>Citadel allocates flexible security domains into physically disjoint DRAM regions through a redesigned allocator.</nowiki>
-|context=<nowiki>Venue: MICRO. Year: 2025.</nowiki>
+|context=<nowiki>Venue: MICRO. Year: 2025.
-|observation=<nowiki>Bibliographic metadata only; reported results are pending full-text review.</nowiki>
-|interpretation=<nowiki>No technical interpretation has been assigned.</nowiki>
+Guard-row approaches often waste substantial DRAM as the number of isolated domains grows.
-|reusable_lesson=<nowiki>Pending full-text review.</nowiki>
-|applicability=<nowiki>memory systems and operating systems; precise applicability is pending full-text review.</nowiki>
+Verification: official DOI/publisher abstract; confidence=high.</nowiki>
-|confidence=<nowiki>high</nowiki>
+|observation=<nowiki>workloads=thousands of memory security domains; baselines=prior guard/isolation allocation; metrics=memory overhead and performance; results=7.2% average overhead, no performance loss, 4–6x less overhead than prior isolation</nowiki>
+|interpretation=<nowiki>Row-aware allocator structure can turn physical separation into a scalable isolation primitive.</nowiki>
+|reusable_lesson=<nowiki>Encode hardware fault geometry directly into allocation domains.</nowiki>
+|applicability=<nowiki>Multi-tenant DRAM systems needing inter-domain RowHammer isolation.
+Limits: Assumes known DRAM row mapping/geometry and protects inter-domain placement rather than every RowHammer vector.</nowiki>
+|confidence=<nowiki>medium</nowiki>
 |evidence=<nowiki>Citadel: Rethinking Memory Allocation to Safeguard Against Inter-Domain Rowhammer Exploits. MICRO 2025.</nowiki>
 |record_origin=<nowiki>lab</nowiki>
@@ 15번째 줄: / 21번째 줄: @@
 |review_state=<nowiki>Draft</nowiki>
 |created_at=<nowiki>2026-07-16T15:03:10.606577Z</nowiki>
-|updated_at=<nowiki>2026-07-16T18:57:27.668981Z</nowiki>
+|updated_at=<nowiki>2026-07-18T14:58:22.553957Z</nowiki>
 }}
@@ 45번째 줄: / 51번째 줄: @@
 |added_by=<nowiki>S3ResearchAgent</nowiki>
 |added_at=<nowiki>2026-07-16T18:57:27.668981Z</nowiki>
+}}
+{{Lesson evidence
+|id=<nowiki>canonical-paper-v2-8fd39aca</nowiki>
+|citation=<nowiki>Anish Saxena; Walter Wang; Alexandros Daglis. Citadel: Rethinking Memory Allocation to Safeguard Against Inter-Domain Rowhammer Exploits. MICRO, 2025.</nowiki>
+|url=<nowiki>https://doi.org/10.1145/3725843.3756098</nowiki>
+|kind=<nowiki>paper</nowiki>
+|verification_basis=<nowiki>official_abstract</nowiki>
+|note=<nowiki>Verification: official DOI/publisher abstract; confidence=medium.
+Canonical title: Citadel: Rethinking Memory Allocation to Safeguard Against Inter-Domain Rowhammer Exploits
+Question: Can physical memory allocation isolate security domains from cross-domain RowHammer without prohibitive capacity loss?
+Context: Guard-row approaches often waste substantial DRAM as the number of isolated domains grows.
+Method: Citadel allocates flexible security domains into physically disjoint DRAM regions through a redesigned allocator.
+Evaluation: workloads=thousands of memory security domains; baselines=prior guard/isolation allocation; metrics=memory overhead and performance; results=7.2% average overhead, no performance loss, 4–6x less overhead than prior isolation
+Interpretation: Row-aware allocator structure can turn physical separation into a scalable isolation primitive.
+Reusable lesson: Encode hardware fault geometry directly into allocation domains.
+Applicability: Multi-tenant DRAM systems needing inter-domain RowHammer isolation.
+Limits: Assumes known DRAM row mapping/geometry and protects inter-domain placement rather than every RowHammer vector.</nowiki>
+|added_by=<nowiki>S3ResearchAgent</nowiki>
+|added_at=<nowiki>2026-07-18T05:13:55.618628Z</nowiki>
+}}
+{{Lesson evidence verification
+|id=<nowiki>verify_f149c5d81f627bb9599b</nowiki>
+|evidence_id=<nowiki>ev_91ca5f70c5ad4bea</nowiki>
+|evidence_digest=<nowiki>3e79770bca95268339d746b8adb16b7f2af29e9bbb089af74d0b687e8f98af92</nowiki>
+|verification_basis=<nowiki>metadata_only</nowiki>
+|source_identity=<nowiki>R2-RESTIC:7f893ca5afd2cfb6fe320e9b61063ccc70e75a7a96589420038c8cf338b273be; archive-manifest-sha256=e28171fb69e141ce306d92dfe4b10e6cdc6e81d4fa910c30a846204dbcf8edf8; sha256=a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3</nowiki>
+|source_sha256=<nowiki>a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3</nowiki>
+|source_locator=<nowiki>보존 파일 objects/sha256/a3/a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3</nowiki>
+|coverage=<nowiki>보존 객체는 cookie/landing page이므로 서지 위치만 확인했고 본문 주장을 검증하지 못함.</nowiki>
+|outcome=<nowiki>inconclusive</nowiki>
+|claim_fields=<nowiki>context</nowiki>
+|verified_by=<nowiki>S3ResearchAgent</nowiki>
+|verified_at=<nowiki>2026-07-18T14:58:22.205633Z</nowiki>
+}}
+{{Lesson evidence verification
+|id=<nowiki>verify_8cd2221ac1d6c36c188f</nowiki>
+|evidence_id=<nowiki>verified-content-v1-0137</nowiki>
+|evidence_digest=<nowiki>23742c541ce8dad75727c65188f01238f028e59bc6aa239ef0a1eb794e8c2d61</nowiki>
+|verification_basis=<nowiki>metadata_only</nowiki>
+|source_identity=<nowiki>R2-RESTIC:7f893ca5afd2cfb6fe320e9b61063ccc70e75a7a96589420038c8cf338b273be; archive-manifest-sha256=e28171fb69e141ce306d92dfe4b10e6cdc6e81d4fa910c30a846204dbcf8edf8; sha256=a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3</nowiki>
+|source_sha256=<nowiki>a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3</nowiki>
+|source_locator=<nowiki>보존 파일 objects/sha256/a3/a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3</nowiki>
+|coverage=<nowiki>보존 객체는 cookie/landing page이므로 서지 위치만 확인했고 본문 주장을 검증하지 못함.</nowiki>
+|outcome=<nowiki>inconclusive</nowiki>
+|claim_fields=<nowiki>context</nowiki>
+|verified_by=<nowiki>S3ResearchAgent</nowiki>
+|verified_at=<nowiki>2026-07-18T14:58:22.408148Z</nowiki>
+}}
+{{Lesson evidence verification
+|id=<nowiki>verify_9c07808dc5e89c5e1fb1</nowiki>
+|evidence_id=<nowiki>canonical-paper-v2-8fd39aca</nowiki>
+|evidence_digest=<nowiki>5f22ca9bdc8fb8a6101a821e9938576ed27ec078c6c09984e8a8d9b242ddb921</nowiki>
+|verification_basis=<nowiki>metadata_only</nowiki>
+|source_identity=<nowiki>R2-RESTIC:7f893ca5afd2cfb6fe320e9b61063ccc70e75a7a96589420038c8cf338b273be; archive-manifest-sha256=e28171fb69e141ce306d92dfe4b10e6cdc6e81d4fa910c30a846204dbcf8edf8; sha256=a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3</nowiki>
+|source_sha256=<nowiki>a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3</nowiki>
+|source_locator=<nowiki>보존 파일 objects/sha256/a3/a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3</nowiki>
+|coverage=<nowiki>보존 객체는 cookie/landing page이므로 서지 위치만 확인했고 본문 주장을 검증하지 못함.</nowiki>
+|outcome=<nowiki>inconclusive</nowiki>
+|claim_fields=<nowiki>context</nowiki>
+|verified_by=<nowiki>S3ResearchAgent</nowiki>
+|verified_at=<nowiki>2026-07-18T14:58:22.553957Z</nowiki>
 }}