Search papers, labs, and topics across Lattice.
This paper identifies and models a novel attack vector, Collective Semantic Corruption (CSC), which exploits non-control data in CUDA collective operations to authorize decisions based on incorrect participation metadata. By evaluating CSC across various CUDA primitives, the authors demonstrate that corrupted metadata leads to a trusted-reference mismatch in all tested instances, highlighting a critical vulnerability in collective decision-making processes. The introduction of Collective Integrity Contracts (CIC) provides a protective framework that ensures the integrity of participation metadata, thereby enhancing the security of CUDA collective operations.
Corrupted participation metadata can lead to catastrophic decision-making failures in CUDA collective operations, with a 100% failure rate in trusted-reference integrity across all tested instances.
CUDA collective operations often sit on security decision paths: votes accept batches, reductions aggregate evidence, shuffles select representatives, and barriers order checked state before use. Such decisions depend not only on computed values, but also on which lanes are represented, what evidence they contribute, which lane speaks for the group, and which checked state reaches commit. We identify this participation metadata as decision-making non-control data. We define Collective Semantic Corruption (CSC), a non-control-data attack family in which range-valid masks, predicates, source lanes, descriptors, group labels, or epochs cause a CUDA-conforming collective to authorize a decision over the wrong membership, contribution, role, or validation-to-use state. The kernel reaches the intended collective site and executes the expected primitive; the primitive represents the wrong authority set. We model CSC with a site-local participation-authority contract. A protected collective derives, recomputes, checks, or freezes membership, contribution, role, and temporal state before authorization. We evaluate CSC across NVIDIA CUDA collective primitives, trigger channels, compact workload-style kernels, reduced idiom bridges, and admission-guard harnesses. In a CUDA-defined contract-conformance suite spanning the four authority dimensions, corrupted participation metadata causes a trusted-reference mismatch in 102/102 instances, while hardened variants preserve that reference in 102/102. We report 13 synchronization-sensitive instances separately. We then introduce Collective Integrity Contracts (CIC), a wrapper discipline that binds participation metadata before collective use. For CUDA collective decisions, security depends on both the values computed and the participants represented.
