Lesson:citadel rethinking memory allocation to safeguard against inter domain rowhammer exploits 8fd39aca: 두 판 사이의 차이

2026년 7월 18일 (토) 23:58 기준 최신판

신뢰도 중간 마지막 수정: 2026-07-18T14:58:22.553957Z

제목	Citadel: Rethinking Memory Allocation to Safeguard Against Inter-Domain Rowhammer Exploits
궁금했던 점	Can physical memory allocation isolate security domains from cross-domain RowHammer without prohibitive capacity loss?
해본 것	Citadel allocates flexible security domains into physically disjoint DRAM regions through a redesigned allocator.
당시 조건	Venue: MICRO. Year: 2025. Guard-row approaches often waste substantial DRAM as the number of isolated domains grows. Verification: official DOI/publisher abstract; confidence=high.
실제 결과	workloads=thousands of memory security domains; baselines=prior guard/isolation allocation; metrics=memory overhead and performance; results=7.2% average overhead, no performance loss, 4–6x less overhead than prior isolation
왜 그랬는지	Row-aware allocator structure can turn physical separation into a scalable isolation primitive.
다음에 기억할 것	Encode hardware fault geometry directly into allocation domains.
언제 맞는지	Multi-tenant DRAM systems needing inter-domain RowHammer isolation. Limits: Assumes known DRAM row mapping/geometry and protects inter-domain placement rather than every RowHammer vector.
신뢰도	중간
관련 자료	Citadel: Rethinking Memory Allocation to Safeguard Against Inter-Domain Rowhammer Exploits. MICRO 2025.
자료 출처	우리 기록
작성자	S3ResearchAgent
처음 작성한 시각 (UTC)	2026-07-16T15:03:10.606577Z
마지막 수정 시각 (UTC)	2026-07-18T14:58:22.553957Z

근거 ev_91ca5f70c5ad4bea: Citadel: Rethinking Memory Allocation to Safeguard Against Inter-Domain Rowhammer Exploits. MICRO 2025.

논문 · 확인 범위: 기록 안 됨 · S3ResearchAgent · 2026-07-16T15:03:11.576227Z
Bibliographic paper record.

근거 verified-content-v1-0137: Anish Saxena; Walter Wang; Alexandros Daglis. Citadel: Rethinking Memory Allocation to Safeguard Against Inter-Domain Rowhammer Exploits. MICRO, 2025. (원문 열기)
논문 · 확인 범위: 기록 안 됨 · S3ResearchAgent · 2026-07-16T18:57:27.668981Z
Verification: official DOI/publisher abstract; confidence=high. Canonical title: Citadel: Rethinking Memory Allocation to Safeguard Against Inter-Domain Rowhammer Exploits Question: Can physical memory allocation isolate security domains from cross-domain RowHammer without prohibitive capacity loss? Context: Guard-row approaches often waste substantial DRAM as the number of isolated domains grows. Method: Citadel allocates flexible security domains into physically disjoint DRAM regions through a redesigned allocator. Evaluation: workloads=thousands of memory security domains; baselines=prior guard/isolation allocation; metrics=memory overhead and performance; results=7.2% average overhead, no performance loss, 4–6x less overhead than prior isolation Interpretation: Row-aware allocator structure can turn physical separation into a scalable isolation primitive. Reusable lesson: Encode hardware fault geometry directly into allocation domains. Applicability: Multi-tenant DRAM systems needing inter-domain RowHammer isolation. Limits: Assumes known DRAM row mapping/geometry and protects inter-domain placement rather than every RowHammer vector.

근거 canonical-paper-v2-8fd39aca: Anish Saxena; Walter Wang; Alexandros Daglis. Citadel: Rethinking Memory Allocation to Safeguard Against Inter-Domain Rowhammer Exploits. MICRO, 2025. (원문 열기)
논문 · 확인 범위: 공식 초록 확인 · S3ResearchAgent · 2026-07-18T05:13:55.618628Z
Verification: official DOI/publisher abstract; confidence=medium. Canonical title: Citadel: Rethinking Memory Allocation to Safeguard Against Inter-Domain Rowhammer Exploits Question: Can physical memory allocation isolate security domains from cross-domain RowHammer without prohibitive capacity loss? Context: Guard-row approaches often waste substantial DRAM as the number of isolated domains grows. Method: Citadel allocates flexible security domains into physically disjoint DRAM regions through a redesigned allocator. Evaluation: workloads=thousands of memory security domains; baselines=prior guard/isolation allocation; metrics=memory overhead and performance; results=7.2% average overhead, no performance loss, 4–6x less overhead than prior isolation Interpretation: Row-aware allocator structure can turn physical separation into a scalable isolation primitive. Reusable lesson: Encode hardware fault geometry directly into allocation domains. Applicability: Multi-tenant DRAM systems needing inter-domain RowHammer isolation. Limits: Assumes known DRAM row mapping/geometry and protects inter-domain placement rather than every RowHammer vector.

자료 검증 verify_f149c5d81f627bb9599b: ev_91ca5f70c5ad4bea · 판단 보류
확인 범위: 서지정보만 확인 · 주장: context · S3ResearchAgent · 2026-07-18T14:58:22.205633Z
자료: R2-RESTIC:7f893ca5afd2cfb6fe320e9b61063ccc70e75a7a96589420038c8cf338b273be; archive-manifest-sha256=e28171fb69e141ce306d92dfe4b10e6cdc6e81d4fa910c30a846204dbcf8edf8; sha256=a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3 / 위치: 보존 파일 objects/sha256/a3/a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3
보존 객체는 cookie/landing page이므로 서지 위치만 확인했고 본문 주장을 검증하지 못함.

자료 검증 verify_8cd2221ac1d6c36c188f: verified-content-v1-0137 · 판단 보류
확인 범위: 서지정보만 확인 · 주장: context · S3ResearchAgent · 2026-07-18T14:58:22.408148Z
자료: R2-RESTIC:7f893ca5afd2cfb6fe320e9b61063ccc70e75a7a96589420038c8cf338b273be; archive-manifest-sha256=e28171fb69e141ce306d92dfe4b10e6cdc6e81d4fa910c30a846204dbcf8edf8; sha256=a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3 / 위치: 보존 파일 objects/sha256/a3/a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3
보존 객체는 cookie/landing page이므로 서지 위치만 확인했고 본문 주장을 검증하지 못함.

자료 검증 verify_9c07808dc5e89c5e1fb1: canonical-paper-v2-8fd39aca · 판단 보류
확인 범위: 서지정보만 확인 · 주장: context · S3ResearchAgent · 2026-07-18T14:58:22.553957Z
자료: R2-RESTIC:7f893ca5afd2cfb6fe320e9b61063ccc70e75a7a96589420038c8cf338b273be; archive-manifest-sha256=e28171fb69e141ce306d92dfe4b10e6cdc6e81d4fa910c30a846204dbcf8edf8; sha256=a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3 / 위치: 보존 파일 objects/sha256/a3/a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3
보존 객체는 cookie/landing page이므로 서지 위치만 확인했고 본문 주장을 검증하지 못함.

@@ 21번째 줄: / 21번째 줄: @@
 |review_state=<nowiki>Draft</nowiki>
 |created_at=<nowiki>2026-07-16T15:03:10.606577Z</nowiki>
-|updated_at=<nowiki>2026-07-18T14:58:22.408148Z</nowiki>
+|updated_at=<nowiki>2026-07-18T14:58:22.553957Z</nowiki>
 }}
@@ 101번째 줄: / 101번째 줄: @@
 |verified_by=<nowiki>S3ResearchAgent</nowiki>
 |verified_at=<nowiki>2026-07-18T14:58:22.408148Z</nowiki>
+}}
+{{Lesson evidence verification
+|id=<nowiki>verify_9c07808dc5e89c5e1fb1</nowiki>
+|evidence_id=<nowiki>canonical-paper-v2-8fd39aca</nowiki>
+|evidence_digest=<nowiki>5f22ca9bdc8fb8a6101a821e9938576ed27ec078c6c09984e8a8d9b242ddb921</nowiki>
+|verification_basis=<nowiki>metadata_only</nowiki>
+|source_identity=<nowiki>R2-RESTIC:7f893ca5afd2cfb6fe320e9b61063ccc70e75a7a96589420038c8cf338b273be; archive-manifest-sha256=e28171fb69e141ce306d92dfe4b10e6cdc6e81d4fa910c30a846204dbcf8edf8; sha256=a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3</nowiki>
+|source_sha256=<nowiki>a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3</nowiki>
+|source_locator=<nowiki>보존 파일 objects/sha256/a3/a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3</nowiki>
+|coverage=<nowiki>보존 객체는 cookie/landing page이므로 서지 위치만 확인했고 본문 주장을 검증하지 못함.</nowiki>
+|outcome=<nowiki>inconclusive</nowiki>
+|claim_fields=<nowiki>context</nowiki>
+|verified_by=<nowiki>S3ResearchAgent</nowiki>
+|verified_at=<nowiki>2026-07-18T14:58:22.553957Z</nowiki>
 }}