Open Access Open Access  Restricted Access Subscription or Fee Access

Impact of Meltdown and Spectre on CPU Manufacture Security Issues

Roza Dastres, Mohsen Soori

Abstract



The Meltdown and spectre holes are two security deficiencies which can provide access to personal data for hackers and can potentially affect performances of Linux, Mac systems, and Windows devices plus other operating systems. In order to prevent the capturing data on computer or smartphones by attackers, two vulnerabilities as meltdown and spectre are recently detected on CPU manufacture. Vulnerabilities are part of the hardware design of the processor by changing the processor structures in terms of security enhancement of the CPU manufacture. Meltdown hole is run on a wide range of operating systems including IOS, Linux, MacOS, and Windows which can affect many service providers and cloud services. There are some fixes from manufacturer of OS and BIOS which are trying to fix exploits. Software patches should be used while undergo updating operations should also be applied in order to enhance the security of operating systems. In this paper, the impact of meltdown hole on various processors and operating systems are studied and methods to deal with the security issues of the processors are also discussed.


Full Text:

PDF

Refbacks

  • There are currently no refbacks.


Disclaimer/Regarding indexing issue:

We have provided the online access of all issues and papers to the indexing agencies (as given on journal web site). It’s depend on indexing agencies when, how and what manner they can index or not. Hence, we like to inform that on the basis of earlier indexing, we can’t predict the today or future indexing policy of third party (i.e. indexing agencies) as they have right to discontinue any journal at any time without prior information to the journal. So, please neither sends any question nor expects any answer from us on the behalf of third party i.e. indexing agencies.Hence, we will not issue any certificate or letter for indexing issue. Our role is just to provide the online access to them. So we do properly this and one can visit indexing agencies website to get the authentic information. Also: DOI is paid service which provided by a third party. We never mentioned that we go for this for our any journal. However, journal have no objection if author go directly for this paid DOI service.