.png){kind=icon}
返回
Investigating Black-Box Function Recognition Using Hardware Performance Counters
.png){kind=icon}
OA
AI
DOI：10.1109/TC.2022.3226302.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
This paper presents new methods and results for recognising black-box program functions using hardware performance counters (HPC), where an investigator can invoke and measure function calls. Important use cases include analysing compiled libraries, e.g., static and dynamic link libraries, and trusted execution environment (TEE) applications. We develop a generic approach to classify a comprehensive set of hardware events, e.g., branch mis-predictions and instruction retirements, to recognise standard benchmarking and cryptographic library functions. This includes various signing, verification and hash functions, and ciphers in numerous modes of operation. Three architectures are evaluated using off-the-shelf Intel/X86-64, ARM, and RISC-V CPUs. Next, we show that several known CVE-numbered OpenSSL vulnerabilities can be detected using HPC differences between patched and unpatched library versions. Further, we demonstrate that standardised cryptographic functions within ARM TrustZone TEE applications can be recognised using non-secure world HPC measurements, applying to platforms that insecurely perturb the performance monitoring unit (PMU) during TEE execution. High accuracy was achieved in all cases (86.22-99.83%) depending on the application, architectural, and compilation assumptions. Lastly, we discuss mitigations, outstanding challenges, and directions for future research.
Keyword:
Side-channel analysis
hardware performance counters (HPCs)
reverse engineering
期刊
IF:
3.8
论文数:
5.4K
被引数:
9.8K
机构
引用论文
Magnetic Structure of Inorganic–Organic Hybrid (C6H5CH2CH2NH3)2MnCl4 Using Magnetic Space Group Concept.png)
Symmetry
OAAI
SymmetryIF0
OAAI分享收藏Intercellular Adhesion Molecule 1 (ICAM-1) Gene Variant is Associated with Coronary Artery Calcification Independent of Soluble ICAM-1 Levels细胞间粘附分子1 (ICAM-1) 基因变异与冠状动脉钙化相关，与可溶性ICAM-1水平无关
PREAI
分享收藏A dual-parameter sensor for strain and temperature measurement featuring cascaded LPFG-FP structureOptik
OptikIF0
PREAI
分享收藏分享收藏
查看更多内容