NetSpectre: Read Arbitrary Memory over Network

Understand

In this paper, we present NetSpectre, a generic remote Spectre variant 1 attack.

• For this purpose, we demonstrate the first access-driven remote Evict+Reload cache attack over network, leaking 15 bits per hour.
• Beyond retrofitting existing attacks to a network scenario, we also demonstrate the first Spectre attack which does not use a cache covert channel.
• Instead, we present a novel high-performance AVX-based covert channel that we use in our cache-free Spectre attack.