uGen: An Agentic Framework for Generating Microarchitectural Attack PoCs
Under Review ยท arXiv preprint arXiv:2605.15503, 2026
Microarchitectural attacks are notoriously hard to reproduce across environments, which makes systematic vulnerability assessment difficult. We first study whether state-of-the-art commercial and open-weight large language models can write functionally correct attack code, and find that they often get critical attack primitives wrong or place them incorrectly. We then present uGen, a retrieval-augmented, multi-agent framework that supplies the missing domain knowledge. Evaluated on cache-based and speculative-execution attacks, uGen reaches up to 100% success for Spectre-v1 and 80% for Prime+Probe, and generates a working proof-of-concept for about $1.25 in under four minutes.
Recommended citation: D. R. Dipta, T. Tiemann, E. Marin, T. Eisenbarth and B. Gulmezoglu, "uGen: An Agentic Framework for Generating Microarchitectural Attack PoCs," arXiv preprint arXiv:2605.15503, 2026.
Download Paper