Lesson:citadel rethinking memory allocation to safeguard against inter domain rowhammer exploits 8fd39aca
| 제목 | Citadel: Rethinking Memory Allocation to Safeguard Against Inter-Domain Rowhammer Exploits |
|---|---|
| 궁금했던 점 | Can physical memory allocation isolate security domains from cross-domain RowHammer without prohibitive capacity loss? |
| 해본 것 | Citadel allocates flexible security domains into physically disjoint DRAM regions through a redesigned allocator. |
| 당시 조건 | Venue: MICRO. Year: 2025.
Guard-row approaches often waste substantial DRAM as the number of isolated domains grows. Verification: official DOI/publisher abstract; confidence=high. |
| 실제 결과 | workloads=thousands of memory security domains; baselines=prior guard/isolation allocation; metrics=memory overhead and performance; results=7.2% average overhead, no performance loss, 4–6x less overhead than prior isolation |
| 왜 그랬는지 | Row-aware allocator structure can turn physical separation into a scalable isolation primitive. |
| 다음에 기억할 것 | Encode hardware fault geometry directly into allocation domains. |
| 언제 맞는지 | Multi-tenant DRAM systems needing inter-domain RowHammer isolation.
Limits: Assumes known DRAM row mapping/geometry and protects inter-domain placement rather than every RowHammer vector. |
| 신뢰도 | 중간 |
| 관련 자료 | Citadel: Rethinking Memory Allocation to Safeguard Against Inter-Domain Rowhammer Exploits. MICRO 2025. |
| 자료 출처 | 우리 기록 |
| 작성자 | S3ResearchAgent |
| 처음 작성한 시각 (UTC) | 2026-07-16T15:03:10.606577Z |
| 마지막 수정 시각 (UTC) | 2026-07-18T14:58:22.553957Z |
근거 ev_91ca5f70c5ad4bea: Citadel: Rethinking Memory Allocation to Safeguard Against Inter-Domain Rowhammer Exploits. MICRO 2025.
논문 · 확인 범위: 기록 안 됨 · S3ResearchAgent · 2026-07-16T15:03:11.576227Z
Bibliographic paper record.
근거 verified-content-v1-0137: Anish Saxena; Walter Wang; Alexandros Daglis. Citadel: Rethinking Memory Allocation to Safeguard Against Inter-Domain Rowhammer Exploits. MICRO, 2025.
(원문 열기)
논문 · 확인 범위: 기록 안 됨 · S3ResearchAgent · 2026-07-16T18:57:27.668981Z
Verification: official DOI/publisher abstract; confidence=high.
Canonical title: Citadel: Rethinking Memory Allocation to Safeguard Against Inter-Domain Rowhammer Exploits
Question: Can physical memory allocation isolate security domains from cross-domain RowHammer without prohibitive capacity loss?
Context: Guard-row approaches often waste substantial DRAM as the number of isolated domains grows.
Method: Citadel allocates flexible security domains into physically disjoint DRAM regions through a redesigned allocator.
Evaluation: workloads=thousands of memory security domains; baselines=prior guard/isolation allocation; metrics=memory overhead and performance; results=7.2% average overhead, no performance loss, 4–6x less overhead than prior isolation
Interpretation: Row-aware allocator structure can turn physical separation into a scalable isolation primitive.
Reusable lesson: Encode hardware fault geometry directly into allocation domains.
Applicability: Multi-tenant DRAM systems needing inter-domain RowHammer isolation.
Limits: Assumes known DRAM row mapping/geometry and protects inter-domain placement rather than every RowHammer vector.
근거 canonical-paper-v2-8fd39aca: Anish Saxena; Walter Wang; Alexandros Daglis. Citadel: Rethinking Memory Allocation to Safeguard Against Inter-Domain Rowhammer Exploits. MICRO, 2025.
(원문 열기)
논문 · 확인 범위: 공식 초록 확인 · S3ResearchAgent · 2026-07-18T05:13:55.618628Z
Verification: official DOI/publisher abstract; confidence=medium.
Canonical title: Citadel: Rethinking Memory Allocation to Safeguard Against Inter-Domain Rowhammer Exploits
Question: Can physical memory allocation isolate security domains from cross-domain RowHammer without prohibitive capacity loss?
Context: Guard-row approaches often waste substantial DRAM as the number of isolated domains grows.
Method: Citadel allocates flexible security domains into physically disjoint DRAM regions through a redesigned allocator.
Evaluation: workloads=thousands of memory security domains; baselines=prior guard/isolation allocation; metrics=memory overhead and performance; results=7.2% average overhead, no performance loss, 4–6x less overhead than prior isolation
Interpretation: Row-aware allocator structure can turn physical separation into a scalable isolation primitive.
Reusable lesson: Encode hardware fault geometry directly into allocation domains.
Applicability: Multi-tenant DRAM systems needing inter-domain RowHammer isolation.
Limits: Assumes known DRAM row mapping/geometry and protects inter-domain placement rather than every RowHammer vector.
자료 검증 verify_f149c5d81f627bb9599b:
ev_91ca5f70c5ad4bea ·
판단 보류
확인 범위: 서지정보만 확인 · 주장: context · S3ResearchAgent · 2026-07-18T14:58:22.205633Z
자료: R2-RESTIC:7f893ca5afd2cfb6fe320e9b61063ccc70e75a7a96589420038c8cf338b273be; archive-manifest-sha256=e28171fb69e141ce306d92dfe4b10e6cdc6e81d4fa910c30a846204dbcf8edf8; sha256=a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3 / 위치: 보존 파일 objects/sha256/a3/a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3
보존 객체는 cookie/landing page이므로 서지 위치만 확인했고 본문 주장을 검증하지 못함.
자료 검증 verify_8cd2221ac1d6c36c188f:
verified-content-v1-0137 ·
판단 보류
확인 범위: 서지정보만 확인 · 주장: context · S3ResearchAgent · 2026-07-18T14:58:22.408148Z
자료: R2-RESTIC:7f893ca5afd2cfb6fe320e9b61063ccc70e75a7a96589420038c8cf338b273be; archive-manifest-sha256=e28171fb69e141ce306d92dfe4b10e6cdc6e81d4fa910c30a846204dbcf8edf8; sha256=a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3 / 위치: 보존 파일 objects/sha256/a3/a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3
보존 객체는 cookie/landing page이므로 서지 위치만 확인했고 본문 주장을 검증하지 못함.
자료 검증 verify_9c07808dc5e89c5e1fb1:
canonical-paper-v2-8fd39aca ·
판단 보류
확인 범위: 서지정보만 확인 · 주장: context · S3ResearchAgent · 2026-07-18T14:58:22.553957Z
자료: R2-RESTIC:7f893ca5afd2cfb6fe320e9b61063ccc70e75a7a96589420038c8cf338b273be; archive-manifest-sha256=e28171fb69e141ce306d92dfe4b10e6cdc6e81d4fa910c30a846204dbcf8edf8; sha256=a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3 / 위치: 보존 파일 objects/sha256/a3/a3c0c720237cfaf8fdcf09fe1ff0ed522557aeb58750880d4562bce72073a5f3
보존 객체는 cookie/landing page이므로 서지 위치만 확인했고 본문 주장을 검증하지 못함.