powerpoint presentation · less frequent, smaller cache region: 15% more frequent, larger cache...
TRANSCRIPT
![Page 1: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/1.jpg)
![Page 2: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/2.jpg)
![Page 3: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/3.jpg)
![Page 4: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/4.jpg)
The attacker runs a program on the system that is performing the cryptographic operation of interest
Basic idea: observe computation’s effects on the system, and learn information from that
Recent attacks are asynchronous, in that they do not require the attacker to achieve precisely timed observations of the victim
![Page 5: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/5.jpg)
Cache Set
Cache Line
4-way set associative cache
Physical Address
![Page 6: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/6.jpg)
PRIME
![Page 7: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/7.jpg)
PRIME PRIME-PROBE Interval
![Page 8: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/8.jpg)
PRIME-PROBE Interval
400 600 500 400 400 500
PRIME PROBE
![Page 9: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/9.jpg)
Hardware
Operating System
Attacker
Process
Victim
Process
Hardware
Virtual Machine Monitor
Victim VM
Victim
Process
OS
Attacker VM
![Page 10: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/10.jpg)
PRIME-PROBE Interval PRIME PROBE
![Page 11: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/11.jpg)
PRIME-PROBE Interval PRIME PROBE
![Page 12: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/12.jpg)
![Page 13: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/13.jpg)
![Page 14: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/14.jpg)
![Page 15: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/15.jpg)
![Page 16: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/16.jpg)
![Page 17: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/17.jpg)
![Page 18: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/18.jpg)
![Page 19: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/19.jpg)
Foe VM
Friendly VMs
![Page 20: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/20.jpg)
Xen Hypervisor
Friendly VMs
![Page 21: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/21.jpg)
Xen Hypervisor
PRIME PRIME-PROBE Interval PROBE
![Page 22: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/22.jpg)
Pseudo-physical Pages
Physical Pages
0x5000 0x3000
2 1 3 5 4
2 1 3 5 4
0x5000 0x3000 Page Table Entries
Physical Address 0x2000 0x1000 0x3000 0x4000 0x5000
![Page 23: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/23.jpg)
Pseudo-physical Pages
Physical Pages
Reserved pages
0x01 0x02 0x03 0x04 0x05 0x06
Avoided pages
Data copy
L2 Cache
![Page 24: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/24.jpg)
PRIME PROBE PRIME-PROBE Interval
![Page 25: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/25.jpg)
core core
0
0.01
0.02
0.03
0.04
0.05
0.06
0.07
1500 2000 2500 3000 3500
Em
pir
ical
pro
bab
ilit
y
PROBE results with NO foe present (CPU cycles)
core
L2 L2
core
![Page 26: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/26.jpg)
0
0.01
0.02
0.03
0.04
0.05
0.06
0.07
1500 2000 2500 3000 3500
Em
pir
ical
pro
bab
ilit
y
PROBE results with NO foe present (CPU cycles)
Class B
Class A
Foe more
PROBE results
here
Foe less PROBE
results here
![Page 27: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/27.jpg)
Different friend I/O
level
. . .
![Page 28: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/28.jpg)
Cache region Select Monitoring VM
Xen Hypervisor
![Page 29: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/29.jpg)
Xen Hypervisor
PRIME PRIME-PROBE Interval PROBE
![Page 30: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/30.jpg)
Xen Hypervisor
Select next Monitoring VM Does the PROBE result fall into
class A or class B? I am the next
Monitoring VM
![Page 31: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/31.jpg)
![Page 32: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/32.jpg)
True detection rate (with 1% false positive) Foe VM running cloud applications
Simulated with PARSEC benchmarks: 84% - 100% Foe VM running PRIME-PROBE protocol
Less frequent, smaller cache region: 15%
More frequent, larger cache region: 85%
Performance overhead Address remapping: 150ms for remapping a 2GB memory (1/16 mapped to monitored cache region)
Less than 5% overhead during detection period
![Page 33: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/33.jpg)
![Page 34: PowerPoint Presentation · Less frequent, smaller cache region: 15% More frequent, larger cache region: 85% Performance overhead Address remapping: 150ms for remapping a 2GB memory](https://reader034.vdocument.in/reader034/viewer/2022051608/603ca81726abd005b8158ad5/html5/thumbnails/34.jpg)