返回
MemWander: Memory Dynamic Remapping via Hypervisor Against Cache-Based Side-Channel Attacks
DOI:10.1109/ACCESS.2018.2886372.png)
摘要
En 中文
Current countermeasures against last level cache (LLC) based non-memory-sharing side-channel attacks (LNSA), which is a powerful and practical cache attack in the cloud, fail in practical due to their shortage of generality or efficiency. Motivated by random cache access, we propose a novel defense method called dynamic remapping which dynamically changes mapping relationship from virtual memory to cache at hypervisor layer. It aims to confuse the attacker about the relationship between observed cache activities and values of demanded secret. In order to guarantee scalability and deployability, we formalize the problem of remapping, and design a sequential classified selection algorithm to decide how to remap all those protected memory. Furthermore, we implement MemWander, a prototype system integrated in Xen and OpenStack which are popular cloud settings. And its security improvement and performance overhead are evaluated on various applications and an apache server as a simulated cloud service. The experimental results show that MemWander not only provides enough security guarantees for general services in cloud, but also induces low performance overhead as no more than 7%, which is tolerable in most scenarios.
Keyword:
Cache-based side-channel attack
hypervisor-based defense
memory dynamic remapping
AI总结
对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
3.6
论文数:
9.8W
被引数:
29.4W
机构
引用论文
Mollusc assemblages in palaeoecological reconstructions: an investigation of their predictive power using transfer function models
Boreas
IF0
Sfrp5 Modulates Both Wnt and BMP Signaling and Regulates Gastrointestinal Organogensis in the Zebrafish, Danio rerio
PLoS ONE
IF0
The SP-C promoter facilitates alveolar type II epithelial cell-specific plasmid nuclear import and gene expression
Gene Therapy
IF0

