FLUSH + PREFETCH: A Countermeasure Against Access-driven Cache-based Side-Channel Attacks - Archive ouverte HAL
Article Dans Une Revue Journal of Systems Architecture Année : 2020

FLUSH + PREFETCH: A Countermeasure Against Access-driven Cache-based Side-Channel Attacks

M Asim Mukhtar
  • Fonction : Auteur
  • PersonId : 1061399
Maria Mushtaq
Vianney Lapotre
Guy Gogniat

Résumé

Cache-based side-channel attacks (SCAs) are becoming a security threat to the emerging computing platforms. To mitigate these attacks, numerous countermeasures have been proposed. However, these countermeasures require either radical hardware modification or they are incompatible with the performance features like super-page and data de-duplication. This paper presents a countermeasure, called Flush+Prefetch, which obfuscates the memory access behavior of a secure application using independent threads that randomly access the memory belonging to secure application. Unlike existing state-of-the-art countermeasures, Flush+Prefetch works with commodity hardware and it is compatible with existing performance features. As a proof-of-concept, we have studied the effectiveness of Flush+Prefetch by defending the secret key of RSA cryptosystem against a high-resolution cache side-channel attack called Flush+Reload. We have evaluated the confidentiality of RSA decryption process on an Intel Xeon E5-2643 processor by generating 100, 000 requests to a web-server sequentially while considering the effect on performance as well. Our experimental results show that the confidentiality of memory accesses by RSA is preserved under Flush+Prefetch countermeasure. Our results show that the performance, in terms of average execution time, is improved by 10.2% for best design case as compared to the system under attack.
Fichier principal
Vignette du fichier
1-s2.0-S1383762119305053-main.pdf (1.74 Mo) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-02417391 , version 1 (18-12-2019)

Identifiants

Citer

M Asim Mukhtar, Maria Mushtaq, M Khurram Bhatti, Vianney Lapotre, Guy Gogniat. FLUSH + PREFETCH: A Countermeasure Against Access-driven Cache-based Side-Channel Attacks. Journal of Systems Architecture, 2020, 104, pp.101698. ⟨10.1016/j.sysarc.2019.101698⟩. ⟨hal-02417391⟩
115 Consultations
421 Téléchargements

Altmetric

Partager

More