CSCI 699: Understanding and Identifying Side-Channel Threats in Cloud and LLM Systems

This graduate seminar course provides an in-depth exploration of side-channel attacks with a focus on cloud computing environments and large language model (LLM) systems. We will examine how subtle indirect leakages (e.g., execution timing, cache usage, resource contention) can breach isolation barriers in multi-tenant clouds and reveal sensitive data from cryptographic operations, cloud VMs/containers, and even modern AI models. Students will study both foundational side-channel techniques (cache timing attacks, speculative execution vulnerabilities) and cutting-edge research on side channels targeting cloud infrastructure and LLM deployments.

• Taxonomy & Fundamentals: Understand the taxonomy of side-channel attacks (timing, cache, power, etc.) and why they pose threats to secure cloud computing. Grasp fundamental techniques like cache Flush+Reload and Prime+Probe, branch prediction manipulation, and other microarchitectural exploits.
• Cloud Multi-Tenancy Risks: Analyze how cloud features (VM co-residency, shared hardware like last-level caches, GPUs) enable cross-tenant side-channel leaks.
• Speculative Execution Vulnerabilities: Comprehend transient execution attacks (e.g., Meltdown, Spectre) that exploit out-of-order and speculative execution to leak protected memory.
• A better understanding of other common privacy-preserving computation techniques such as FL, MPC, and FHE.
• Improve academic writing and presentation skills through assignments and the final project.