SecDir
| Autor: | Mengjia Yan, Josep Torrellas, Jen-Yang Wen, Christopher W. Fletcher |
|---|---|
| Rok vydání: | 2019 |
| Předmět: |
010302 applied physics
Hardware_MEMORYSTRUCTURES Computer science CPU cache 02 engineering and technology Directory Computer security computer.software_genre 01 natural sciences 020202 computer hardware & architecture Cuckoo hashing 0103 physical sciences Scalability Data_FILES 0202 electrical engineering electronic engineering information engineering Key (cryptography) Side channel attack computer Cache coherence Block (data storage) |
| Zdroj: | ISCA |
| DOI: | 10.1145/3307650.3326635 |
| Popis: | Directories for cache coherence have been recently shown to be vulnerable to conflict-based side-channel attacks. By forcing directory conflicts, an attacker can evict victim directory entries, which in turn trigger the eviction of victim cache lines from private caches. This evidence strongly suggests that directories need to be redesigned for security. The key to a secure directory is to block interference between processes. Sadly, in an environment with many cores, this is hard or expensive to do. This paper presents the first design of a scalable secure directory. We call it SecDir. SecDir takes part of the storage used by a conventional directory and re-assigns it to per-core private directory areas used in a victim-cache manner called Victim Directories (VDs). The partitioned nature of VDs prevents directory interference across cores, defeating directory side-channel attacks. The VD of a core is distributed, and holds as many entries as lines in the private L2 cache of the core. To minimize victim self-conflicts in a VD during an attack, a VD is organized as a cuckoo directory. Such a design also obscures the victim's conflict patterns from the attacker. For our evaluation, we model with simulations the directory of an Intel Skylake-X server with and without SecDir. Our results show that SecDir has a negligible performance overhead. Furthermore, SecDir is area-efficient. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|