Abstract:Cache coherence states have recently been exploited to leak secrets through timing-channel attacks. The root cause lies in the fact that shared data in state Exclusive (E) and state Shared (S) are served from different cache layers. The state-of-the-art countermeasure—S-MESI—serves both E- and S-state shared data from the last-level cache (LLC) by explicitly synchronizing the Modified (M) state across private caches and the LLC. This has to sacrifice the silent upgrade feature that MESI introduces for speedup. Moreover, it enforces protection to not only exploitable shared data but also unshared data. This further slows down performance, especially for write-after-read intensive applications. In this paper, we propose SwiftDir to efficiently secure cache coherence against cover-channel attacks without overprotection. SwiftDir fundamentally narrows down the protection scope to write-protected data. Such exploitable shared data can be uniquely identified with the write-protection permission in the memory management unit (MMU) and do not necessarily transit to state M. We validate this idea through tracing system calls of shared libraries on Linux. We then investigate all three commercial cache architectures (i.e., PIPT, VIPT, and VIVT) and find it feasible to hitchhike the address translation process to transmit the write-protection information from the MMU to the coherence controller. Then SwiftDir enforces protection over only write-protected data by serving all requests toward them directly from the LLC with a constant latency. This not only simplifies how MESI handles write-protected data but also avoids how S-MESI overprotects them. Meanwhile, SwiftDir still preserves silent upgrade for efficient handling of unshared data. Extensive experiments demonstrate that our SwiftDir can secure cache coherence while outperforming not only secure SMESI but also unprotected MESI.

Secure hybrid replacement policy: Mitigating conflict-based cache side channel attacks

Seeds of SEED: H 2 Cache: Building a Hybrid Randomized Cache Hierarchy for Mitigating Cache Side-Channel Attacks

Randomizing Set-Associative Caches Against Conflict-Based Cache Side-Channel Attacks

TreasureCache: Hiding Cache Evictions Against Side-Channel Attacks

A software approach to defeating side channels in last-level caches

PhantomCache: Obfuscating Cache Conflicts with Localized Randomization

Mitigating Cross-Core Cache Attacks Via Suspicious Traffic Detection

Detecting and Mitigating Cache Side Channel Threats on Intel SGX

CRP: Conditional Replacement Policy for Reliability Enhancement of STT-MRAM Caches

Cost Aware Cache Replacement Policy in Shared Last-Level Cache for Hybrid Memory Based Fog Computing.

SwiftDir: Secure Cache Coherence Without Overprotection.

SEA Cache: A Performance-Efficient Countermeasure for Contention-based Attacks

Cache Replacement Policies for Improving LLC Performance in Multi-Core Processors

RECAST: Mitigating Conflict-Based Cache Attacks Through Fine-Grained Dynamic Mapping

Protecting Cache States Against Both Speculative Execution Attacks and Side-channel Attacks

HybCache: Hybrid Side-Channel-Resilient Caches for Trusted Execution Environments

Efficient Cache Resource Aggregation Using Adaptive Multi-Level Exclusive Caching Policies

Leveraging Hardware Transactional Memory for Cache Side-Channel Defenses.

BackCache: Mitigating Contention-Based Cache Timing Attacks by Hiding Cache Line Evictions

MeshUp: Stateless Cache Side-channel Attack on CPU Mesh

Dynamic Access Distance Driven Cache Replacement