<p>Cache Side-Channel Attacks (CSCAs) pose a significant risk to data security by leveraging Leakage Patterns (LPs) to extract sensitive information. Detection strategies frequently employ software-based solutions utilizing hardware performance counters and machine learning. However, these approaches often encounter issues with accuracy, performance overhead, evasion by advanced attacks, and complexity. There are limited hardware-based solutions, primarily relying on assertions that suffer from high false positives rate and poor real-world attack detection. This paper presents ClearCache, which augments a conventional cache with a Cache Global History Table (CGHT) for LP matching and CSCA detection. Detection warnings of CSCAs are essential to prevent data breaches, enabling proactive measures such as cache flushing or terminating malicious processes. Experimental results show that ClearCache detects CSCAs quickly and accurately, with minimal false positives and low hardware overhead, making it suitable for security verification and integration with baseline caches.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

ClearCache: configurable, lightweight, and accurate cache side-channel attack detection

  • Ali Azarpeyvand,
  • Gert Jervan,
  • Tara Ghasempouri

摘要

Cache Side-Channel Attacks (CSCAs) pose a significant risk to data security by leveraging Leakage Patterns (LPs) to extract sensitive information. Detection strategies frequently employ software-based solutions utilizing hardware performance counters and machine learning. However, these approaches often encounter issues with accuracy, performance overhead, evasion by advanced attacks, and complexity. There are limited hardware-based solutions, primarily relying on assertions that suffer from high false positives rate and poor real-world attack detection. This paper presents ClearCache, which augments a conventional cache with a Cache Global History Table (CGHT) for LP matching and CSCA detection. Detection warnings of CSCAs are essential to prevent data breaches, enabling proactive measures such as cache flushing or terminating malicious processes. Experimental results show that ClearCache detects CSCAs quickly and accurately, with minimal false positives and low hardware overhead, making it suitable for security verification and integration with baseline caches.