移动终端软件高速缓存侧信道脆弱性识别仿真

Simulation of Vulnerability Identification of Mobile Terminal Software Cache Side Channel

以降低软件高速缓存侧信道对用户的危害指数,提升软件的防御能力为目的,研究移动终端软件高速缓存侧信道脆弱性识别方法。通过信号渗透率挖掘脆弱点,转换数据流脆弱点为网络关键节点,以节点度为依据,利用判决门限保持虚景概念和漏检概念平衡。通过筛选节点挖掘缓存侧信道脆弱点,比较其可能存在的不同缓存访问地址,根据脆弱点的可利用性,实现移动终软件高速缓存侧信道脆弱性的识别判断。仿真结果表明,上述方法具备较强的脆弱点识别能力,检测出脆弱点数量较多,同时具备较强的信号抗干扰能力及识别效率,可有效提升信号响应性能和脆弱点识别能力。

In order to reduce the harm index of software cache side channel to users and improve the defense ability of software, in this paper, a channel vulnerability identification method on the cache side of mobile terminal software was reported. According to the signal permeability mining vulnerability, the data flow vulnerability was transformed into a network key node. According to the node degree, the decision threshold was used to balance the concept of virtual scene and missed detection. The nodes were filtered to mine the vulnerable points of the cache side channel, and the possible different cache access addresses were compared. Vulnerability points were used to identify and judge the channel vulnerability on the cache side of mobile terminal software. The simulation results show that this method has strong fragile point recognition ability, excellent signal anti-interference ability and high recognition efficiency.