SpecWands: An Efficient Priority-Based Scheduler Against Speculation Contention Attacks
文献类型：期刊论文
| 作者 | Tang, Bowen5,6; Wu, Chenggang4,5,6; Yew, Pen-Chung3; Zhang, Yinqian2; Xie, Mengyao5,6; Lai, Yuanming5,6; Kang, Yan5,6; Wang, Wei5,6; Wei, Qiang1; Wang, Zhe5,6 |
| 刊名 | IEEE TRANSACTIONS ON COMPUTER-AIDED DESIGN OF INTEGRATED CIRCUITS AND SYSTEMS
 |
| 出版日期 | 2023-12-01 |
| 卷号 | 42期号:12页码:4477-4490 |
| 关键词 | Resource contention scheduling strategy simultaneous multithreading (SMT) transient execution attack (TEA) |
| ISSN号 | 0278-0070 |
| DOI | 10.1109/TCAD.2023.3284290 |
| 英文摘要 | Transient execution attacks (TEAs) have gradually become a major security threat to modern high-performance processors. They exploit the vulnerability of speculative execution to illegally access private data, and transmit them through timing-based covert channels. While new vulnerabilities are discovered continuously, the covert channels can be categorized to two types: 1) Persistent Type, in which covert channels are based on the layout changes of buffering, e.g., through caches or TLBs and 2) Volatile Type, in which covert channels are based on the contention of sharing resources, e.g., through execution units or issuing ports. The defenses against the persistent-type covert channels have been well addressed, while those for the volatile-type are still rather inadequate. Existing mitigation schemes for the volatile type such as Speculative Compression and Time-Division-Multiplexing will introduce significant overhead due to the need to stall the pipeline or to disallow resource sharing. In this article, we look into such attacks and defenses with a new perspective, and propose a scheduling-based mitigation scheme, called SpecWands. It consists of three priority-based scheduling policies to prevent an attacker from transmitting the secret in different contention situations. SpecWands not only can defend against both interthread and intrathread-based attacks but also can keep most of the performance benefit from speculative execution and resource-sharing. We evaluate its runtime overhead on SPEC 2017 benchmarks and realistic programs. The experimental results show that SpecWands has a significant performance advantage over the other two representative schemes. |
| 资助项目 | National Natural Science Foundation of China (NSFC) |
| WOS研究方向 | Computer Science ; Engineering |
| 语种 | 英语 |
| WOS记录号 | WOS:001123254100012 |
| 出版者 | IEEE-INST ELECTRICAL ELECTRONICS ENGINEERS INC |
| 源URL | [http://119.78.100.204/handle/2XEOYT63/38858]  |
| 专题 | 中国科学院计算技术研究所期刊论文_英文 |
| 通讯作者 | Wang, Zhe |
| 作者单位 | 1.State Key Lab Math Engn & Adv Comp, Zhengzhou 450000, Peoples R China 2.Southern Univ Sci & Technol, Dept Comp Sci & Engn, Shenzhen 518055, Peoples R China 3.Univ Minnesota, Comp Sci & Engn Dept, Minneapolis, MN 55455 USA 4.Zhongguancun Lab, Beijing, Peoples R China 5.Univ Chinese Acad Sci, Beijing 100049, Peoples R China 6.Chinese Acad Sci, Inst Comp Technol, SKLP, Beijing 100190, Peoples R China |
| 推荐引用方式 GB/T 7714 | Tang, Bowen,Wu, Chenggang,Yew, Pen-Chung,et al. SpecWands: An Efficient Priority-Based Scheduler Against Speculation Contention Attacks[J]. IEEE TRANSACTIONS ON COMPUTER-AIDED DESIGN OF INTEGRATED CIRCUITS AND SYSTEMS,2023,42(12):4477-4490. |
| APA | Tang, Bowen.,Wu, Chenggang.,Yew, Pen-Chung.,Zhang, Yinqian.,Xie, Mengyao.,...&Wang, Zhe.(2023).SpecWands: An Efficient Priority-Based Scheduler Against Speculation Contention Attacks.IEEE TRANSACTIONS ON COMPUTER-AIDED DESIGN OF INTEGRATED CIRCUITS AND SYSTEMS,42(12),4477-4490. |
| MLA | Tang, Bowen,et al."SpecWands: An Efficient Priority-Based Scheduler Against Speculation Contention Attacks".IEEE TRANSACTIONS ON COMPUTER-AIDED DESIGN OF INTEGRATED CIRCUITS AND SYSTEMS 42.12(2023):4477-4490. |
入库方式： OAI收割
来源：计算技术研究所
浏览0
下载0
收藏0
其他版本
除非特别说明，本系统中所有内容都受版权保护，并保留所有权利。