处理器微体系结构时间侧信道攻击与防御  

Processor time-based microarchitectural side channels,attacks and defenses

作　　者：苑风凯 侯锐 YUAN Feng-kai;HOU Rui(Institute of Information Engineering, State Key Laboratory of Information Security,Chinese Academy of Sciences,Beijing 100093, China)

机构地区：[1]中国科学院信息工程研究所信息安全国家重点实验室,北京100093

出　　处：《广州大学学报（自然科学版）》2020年第2期24-34,共11页Journal of Guangzhou University:Natural Science Edition

基　　金：中国科学院战略性先导科技专项(C类)资助项目(XDC02010200)。

摘　　要：随着处理器性能优化的不断深入,越来越多的基于时间的微体系结构侧信道被研究者披露,对现实的商业处理器发起攻击,成功泄露了安全关键信息.性能优先的处理器设计理念是这些侧信道产生的根源所在.首先,保障处理器动态性能要求不同程序共享微架构组件.其次,微架构设计优化导致了程序执行的快速和慢速微架构行为.文章从三个方面对微体系结构侧信道研究进行了梳理:①结合微架构组件的特点,分析了各微架构组件时间侧信道的建立;②按照基于复用和基于竞争将现有的微体系结构侧信道攻击进行分类并进行全面介绍;③按照基于隔离,基于随机,以及基于检测,概括现有基于硬件的微体系结构侧信道防御.With the continuous performance optimization of processors,the emerging time-based microarchitectural side channels have been discovered by researchers,which launch attacks on real commercial processors and successfully steal security-critical information.The performance-first processor design philosophy is the root cause of these side channels.First,guaranteeing the dynamic performance of the processor requires different programs to share microarchitecture components.Second,the optimization of microarchitecture design leads to fast and slow microarchitectural behaviors of program execution.This article sorts out researches on the side channel of microarchitecture from three aspects:①Extracting the characteristics of microarchitecture components,analyze the establishment of their time-based side channels;②Classify and comprehensively introduce the existing time-based microarchitectural side channel attacks based on their applications of reuse and contention respectively;③According to isolation-based,randomization-based,and detection-based classification,generalize the existing hardware-based microarchitectural side channel defenses.

关 键 词：侧信道 信息泄露 微体系结构 处理器 

分 类 号：TP302.2[自动化与计算机技术—计算机系统结构] TP393[自动化与计算机技术—计算机科学与技术]