TY - GEN
T1 - Microarchitectural Analysis of Speculative Execution Patterns in RISC-V using Machine Learning and ISA-Level Masking Wrappers
AU - Awais, Muhammad
AU - Mushtaq, Maria
AU - Naviner, Lirida
AU - Yahya, Jawad Haj
AU - Bruguier, Florent
N1 - Publisher Copyright:
© 2026 IEEE.
PY - 2026/1/1
Y1 - 2026/1/1
N2 - Speculative execution attacks, such as Spectre Variant 1, leak sensitive data through transient microarchitectural effects. This paper presents a machine learning-based framework for analyzing and mitigating speculative execution vulnerability patterns in RISC-V systems. We extract branch, cache, and timing features from gem5 simulations and validate leakage behavior on a SiFive HiFive Premier P550 platform. Supervised models achieve up to 97.1% accuracy in distinguishing benign and speculative-leak execution windows, while unsupervised methods (K-means, HDBSCAN, and Isolation Forest) independently reveal structural and anomaly-based separation. Feature analysis shows that speculative loads and memory latency are the strongest leakage indicators. We further propose lightweight RISC-V assembly wrappers based on index masking and fence instructions. Results demonstrate that these wrappers shift vulnerable execution toward benign microarchitectural behavior. The proposed approach combines simulation, hardware validation, and learning-based analysis for practical speculative vulnerability analysis and mitigation in RISC-V processors.
AB - Speculative execution attacks, such as Spectre Variant 1, leak sensitive data through transient microarchitectural effects. This paper presents a machine learning-based framework for analyzing and mitigating speculative execution vulnerability patterns in RISC-V systems. We extract branch, cache, and timing features from gem5 simulations and validate leakage behavior on a SiFive HiFive Premier P550 platform. Supervised models achieve up to 97.1% accuracy in distinguishing benign and speculative-leak execution windows, while unsupervised methods (K-means, HDBSCAN, and Isolation Forest) independently reveal structural and anomaly-based separation. Feature analysis shows that speculative loads and memory latency are the strongest leakage indicators. We further propose lightweight RISC-V assembly wrappers based on index masking and fence instructions. Results demonstrate that these wrappers shift vulnerable execution toward benign microarchitectural behavior. The proposed approach combines simulation, hardware validation, and learning-based analysis for practical speculative vulnerability analysis and mitigation in RISC-V processors.
KW - Attacks Patterns
KW - Attacks Simulation
KW - Embedded Systems
KW - Hardware Attacks
KW - Hardware Security
UR - https://www.scopus.com/pages/publications/105047682008
U2 - 10.1109/IOLTS69666.2026.11633845
DO - 10.1109/IOLTS69666.2026.11633845
M3 - Conference contribution
AN - SCOPUS:105047682008
T3 - Proceedings - 2026 IEEE 32nd International Symposium on On-Line Testing and Robust System Design, IOLTS 2026
BT - Proceedings - 2026 IEEE 32nd International Symposium on On-Line Testing and Robust System Design, IOLTS 2026
PB - Institute of Electrical and Electronics Engineers Inc.
T2 - 32nd International Symposium on On-Line Testing and Robust System Design, IOLTS 2026
Y2 - 1 July 2026 through 3 July 2026
ER -