CaSym: Cache Aware Symbolic Execution for Side Channel Detection and Mitigation
CaSym: Cache Aware Symbolic Execution for Side Channel Detection and Mitigation
复制标题
DOI：
10.1109/sp.2019.00022
复制
发表时间：
2019-05
期刊：
影响因子：
--
通讯作者：
Robert Brotzman;Shen Liu;Danfeng Zhang;Gang Tan;M. Kandemir
中科院分区：
文献类型：
--
作者：
Robert Brotzman;Shen Liu;Danfeng Zhang;Gang Tan;M. Kandemir
基于缓存的侧渠道正在成为一个重要的攻击向量，可以通过该向量将秘密信息泄露给恶意派对。但是，先前关于基于缓存的侧渠道检测的工作遭受了代码覆盖范围问题，或者没有提供诊断信息，这对于将缓解技术应用于易受伤害的软件至关重要。我们提出了Casym，这是一种缓存感知的符号执行，以识别和报告有关输入程序中侧渠道在哪里发生的精确信息。与现有工作相比，Casym提供了几个独特的功能：（1）CASYS可以针对各种攻击模型和缓存模型进行验证，（2）与许多用于发现错误的符号执行系统不同，Casym验证了所有程序的执行路径，（3）CASYM使用两个新颖的摘要模型，通过在分析和精确的情况下提供良好的途径，包括分析和精确的范围，（4）在该方面提供了良好的渠道，以及（4）casy的范围，（4）壳体在该方面提供了casem，以及如何在其中提供了casy的信息。预加载和固定。对一组加密和数据库基准的评估表明，Casym具有合理的效率，可有效识别和缓解侧通道。关键字侧通道；符号执行；缓存
Cache-based side channels are becoming an important attack vector through which secret information can be leaked to malicious parties. Previous work on cache-based side channel detection, however, suffers from the code coverage problem or does not provide diagnostic information that is crucial for applying mitigation techniques to vulnerable software. We propose CaSym, a cache-aware symbolic execution to identify and report precise information about where side channels occur in an input program. Compared with existing work, CaSym provides several unique features: (1) CaSym enables verification against various attack models and cache models, (2) unlike many symbolic-execution systems for bug finding, CaSym verifies all program execution paths in a sound way, (3) CaSym uses two novel abstract cache models that provide good balance between analysis scalability and precision, and (4) CaSym provides sufficient information on where and how to mitigate the identified side channels through techniques including preloading and pinning. Evaluation on a set of crypto and database benchmarks shows that CaSym is effective at identifying and mitigating side channels, with reasonable efficiency. Keywords-side-channels; symbolic execution; cache