Dynamic Frequency-Based Fingerprinting Attacks against Modern Sandbox Environments

Date:

Conference presentation at IEEE EuroS&P 2024, presenting the paper “Dynamic Frequency-Based Fingerprinting Attacks against Modern Sandbox Environments.” The talk showed how CPU frequency reporting sensors readable from user space on Intel and AMD processors let an attacker fingerprint Docker containers and workloads running inside gVisor, AWS Firecracker, Gramine-SGX, and AMD SEV, and presented a noise-injection countermeasure.