.png){kind=icon}
Return
ZeroShield: Transparently Mitigating Code Page Sharing Attacks With Zero-Cost Stand-By
.png){kind=icon}
PRE
AI
DOI：10.1109/TIFS.2024.3435062.png)
.png){kind=icon}
Original request for help.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
Numerous cache side-channel attack techniques enable attackers to execute a cross-VM cache side-channel attack through the sharing of code pages with the targeted victim. Nonetheless, most prior defense solutions fall short of efficiency and ease of deployment, thus restricting their practicality for real-world implementation. This paper introduces ZeroShield, an adaptive and transparent approach implemented at the hypervisor layer, designed to counteract the code page sharing attack, a subset of cache side-channel attacks, occurring within a single virtual machine (VM) or spanning across multiple VMs. By thoroughly scrutinizing the by-products resulting from a code page sharing attack, we meticulously track the attacker's access to security-sensitive code pages. This is achieved through harnessing hardware virtualization features, such as the Intel extended page table, in conjunction with the CR3 register. Utilizing this information, ZeroShield continuously monitors security-sensitive code pages, adeptly navigating complex OS and hypervisor behaviors. The architecture of ZeroShield exhibits an attack-aware design, enabling it to deploy protection measures on demand. Consequently, the system theoretically experiences negligible overhead in the absence of attackers. Empirical evidence confirms the effectiveness of ZeroShield in thwarting code page sharing attacks. It achieves this without imposing any performance penalties in the absence of attackers, and with a minimal overhead of less than 3.8% when attackers are active. Significantly, ZeroShield boasts a cost-free standby state and necessitates no adjustments to upper applications, guest OS, or hardware configurations. This attribute positions ZeroShield as an optimal default solution in real-world cloud environments to effectively counter code page sharing attacks.
Keywords:
Codes
Side-channel attacks
Monitoring
Libraries
Hardware
Prefetching
Cloud computing
Cache side-channel attack
virtualization
EPT
mitigation
Journal
IF:
8
Papers:
5.3K
Citations:
2.3W
Organization
Cited Papers
ShareSave
ShareSaveShareSaveHuman stem cell derived sensory neurons are positioned to support varicella zoster virus latency.png)
OAAI
IF0
OAAIShareSave
View more