Attack Resilience of Cache Replacement Policies: A Study Based on TTL Approximation
Attack Resilience of Cache Replacement Policies: A Study Based on TTL Approximation
复制标题
DOI：
10.1109/tnet.2022.3171720
复制
发表时间：
2022-12
期刊：
影响因子：
--
通讯作者：
Tian Xie;Namitha Nambiar;Ting He;P. Mcdaniel
中科院分区：
文献类型：
--
作者：
Tian Xie;Namitha Nambiar;Ting He;P. Mcdaniel
在通信网络中普遍使用高速缓存，以通过重用先前的通信来加速内容访问，其中使用各种替换策略来管理高速缓存的内容。缓存的替换策略在其性能中起着关键作用，因此被广泛设计以在良性环境中实现高命中率。然而，一些研究表明，在良性环境中具有较高命中率的策略可能更容易受到故意发送不受欢迎内容请求的缓存污染攻击。为了了解这种攻击下的该高速缓存的性能，我们分析了一套有代表性的替换策略的TTL近似的框架下，他们如何保持合法用户的命中率，同时将延迟为该高速缓存获得丢失的内容。我们进一步开发了一种方案，根据感知的攻击级别来调整该高速缓存替换策略。通过对真实的数据的分析和验证表明，虽然没有一种策略能够抵御所有的攻击策略，但适当调整替换策略可以显著提高该高速缓存的攻击抵御能力。受这些结果的激励，我们在开源SDN交换机中实施了选定的策略以及策略适应，以管理流规则替换，这显着提高了其对污染攻击的抵御能力。
Caches are pervasively used in communication networks to speed up content access by reusing previous communications, where various replacement policies are used to manage the cached contents. The replacement policy of a cache plays a key role in its performance, and is thus extensively engineered to achieve a high hit ratio in benign environments. However, some studies showed that a policy with a higher hit ratio in benign environments may be more vulnerable to cache pollution attacks that intentionally send requests for unpopular contents. To understand the cache performance under such attacks, we analyze a suite of representative replacement policies under the framework of TTL approximation in how well they preserve the hit ratios for legitimate users, while incorporating the delay for the cache to obtain a missing content. We further develop a scheme to adapt the cache replacement policy based on the perceived level of attack. Our analysis and validation on real traces show that although no single policy is resilient to all the attack strategies, suitably adapting the replacement policy can notably improve the attack resilience of the cache. Motivated by these results, we implement selected policies as well as policy adaptation in an open-source SDN switch to manage flow rule replacement, which is shown to notably improve its resilience to pollution attacks.