|
| | | | |
| | | |
| Stat |
Members: 3645
Articles: 2'501'711
Articles rated: 2609
20 April 2024 |
|
| | | | |
|
Article overview
| |
|
|
Randomized Last-Level Caches Are Still Vulnerable to Cache Side-Channel Attacks! But We Can Fix It | | Wei Song
; Boya Li
; Zihan Xue
; Zhenzhen Li
; Wenhao Wang
; Peng Liu
; | | Date: |
5 Aug 2020 | | Abstract: | Cache randomization has recently been revived as a promising defense against
conflict-based cache side-channel attacks. As two of the latest
implementations, CEASER-S and ScatterCache both claim to thwart conflict-based
cache side-channel attacks using randomized skewed caches. Unfortunately, our
experiments show that an attacker can easily find a usable eviction set within
the chosen remap period of CEASER-S and increasing the number of partitions
without dynamic remapping, such as ScatterCache, cannot eliminate the threat.
By quantitatively analyzing the access patterns left by various attacks in the
LLC, we have newly discovered several problems with the hypotheses and
implementations of randomized caches, which are also overlooked by the research
on conflict-based cache side-channel attack.
However, cache randomization is not a false hope and it is an effective
defense that should be widely adopted in future processors. The newly
discovered problems are corresponding to flaws associated with the existing
implementation of cache randomization and are fixable. Several new defense
techniques are proposed in this paper. our experiments show that all the newly
discovered vulnerabilities of existing randomized caches are fixed within the
current performance budget. We also argue that randomized set-associative
caches can be sufficiently strengthened and possess a better chance to be
actually adopted in commercial processors than their skewed counterparts as
they introduce less overhaul to the existing cache structure. | | Source: | arXiv, 2008.01957 | | Services: | Forum | Review | PDF | Favorites | |
|
|
No review found.
Did you like this article?
Note: answers to reviews or questions about the article must be posted in the forum section.
Authors are not allowed to review their own article. They can use the forum section.
browser Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
|
| |
|
|
|
|
News, job offers and information for researchers and scientists:
| |
REGISTER