Abstract:Shared cache resources in multi-core processors are vulnerable to cache side-channel attacks. Recently proposed defenses have their own caveats: Randomization-based defenses are vulnerable to the evolving attack algorithms besides relying on weak cryptographic primitives, because they do not fundamentally address the root cause for cache side-channel attacks. Cache partitioning defenses, on the other hand, provide the strict resource partitioning and effectively block all side-channel threats. However, they usually rely on way-based partitioning which is not fine-grained and cannot scale to support a larger number of protection domains, e.g., in trusted execution environment (TEE) security architectures, besides degrading performance and often resulting in cache underutilization. To overcome the shortcomings of both approaches, we present a novel and flexible set-associative cache partitioning design for TEE architectures, called Chunked-Cache. Chunked-Cache enables an execution context to "carve" out an exclusive configurable chunk of the cache if the execution requires side-channel resilience. If side-channel resilience is not required, mainstream cache resources are freely utilized. Hence, our solution addresses the security-performance trade-off practically by enabling selective and on-demand utilization of side-channel-resilient caches, while providing well-grounded future-proof security guarantees. We show that Chunked-Cache provides side-channel-resilient cache utilization for sensitive code execution, with small hardware overhead, while incurring no performance overhead on the OS. We also show that it outperforms conventional way-based cache partitioning by 43%, while scaling significantly better to support a larger number of protection domains.

Randomizing Set-Associative Caches Against Conflict-Based Cache Side-Channel Attacks

Seeds of SEED: H 2 Cache: Building a Hybrid Randomized Cache Hierarchy for Mitigating Cache Side-Channel Attacks

PhantomCache: Obfuscating Cache Conflicts with Localized Randomization

Chameleon Cache: Approximating Fully Associative Caches with Random Replacement to Prevent Contention-Based Cache Attacks

RECAST: Mitigating Conflict-Based Cache Attacks Through Fine-Grained Dynamic Mapping

Secure hybrid replacement policy: Mitigating conflict-based cache side channel attacks

Chunked-Cache: On-Demand and Scalable Cache Isolation for Security Architectures

TreasureCache: Hiding Cache Evictions Against Side-Channel Attacks

RollingCache: Using Runtime Behavior to Defend Against Cache Side Channel Attacks

A software approach to defeating side channels in last-level caches

SEA Cache: A Performance-Efficient Countermeasure for Contention-based Attacks

On the Amplification of Cache Occupancy Attacks in Randomized Cache Architectures

Protecting Cache States Against Both Speculative Execution Attacks and Side-channel Attacks

Applying Address Encryption and Timing Noise to Enhance the Security of Caches

Efficient Flush-Reload Cache Attack on Scalar Multiplication Based Signature Algorithm

Predictable Sharing of Last-level Cache Partitions for Multi-core Safety-critical Systems

Seeds of SEED: A Side-Channel Resilient Cache Skewed by a Linear Function over a Galois Field

BackCache: Mitigating Contention-Based Cache Timing Attacks by Hiding Cache Line Evictions

Leveraging Access Locality for the Efficient Use of Multibit Error-Correcting Codes in L2 Cache

On The Effect of Replacement Policies on The Security of Randomized Cache Architectures

Attack of the Knights: A Non Uniform Cache Side-Channel Attack