基于性能分析的Cache侧信道攻击循环定位

Loop pinpoints of Cache side channel attacks from a performance analysis

为了有效地对Cache侧信道攻击进行检测并定位,该文提出了基于性能分析的Cache侧信道攻击循环定位方法,分为攻击检测和攻击循环定位2阶段进行。攻击检测阶段采用硬件性能计数器检测二进制程序是否为Cache侧信道攻击程序;攻击循环定位阶段主要进行攻击循环的定位,首先采样性能事件,然后获取二进制程序的循环和函数等内部结构,结合采样数据定位攻击循环。最后选取典型的Cache侧信道攻击程序和良性程序进行检测,结果表明:该方法能准确区分攻击程序和良性程序;通过对比定位结果和攻击源代码,该方法能精确定位攻击循环。

Cache attacks are a new type of side channel attack which pose a great threat to current security protection.This paper presents a method to effectively detect and locate Cache side channel attacks based on performance analyses of Cache side channel attack loop positioning.The analyses are divided into attack detection and attack loop positioning.In the attack detection phase,the hardware performance counter is used to detect whether a binary program is a Cache side channel attack program.The attack loop positioning phase then locates the attack loop,samples the performance events,and then identifies the internal structure of the binary program loop and function with the findings combined with sampling data to locate the attack loop.Finally,several typical Cache side channel attacks and benign programs are analyzed to show that this method can accurately distinguish between attack programs and benign programs.Comparison of the positioning results with the attack source code shows that the method can accurately locate the attack loop.