Detection and mitigation of side-channel attacks

Abstract

Methods, systems, and computer readable storage media for preventing side-channel attacks are disclosed. A computing resource, such as a virtual machine, operating on a computing device or within a computing environment may be duplicated. Properties associated with the computing resource and the duplicate computing resource may be monitored for discrepancies. The discrepancies may be indicative of a security event, such as a virus or side-channel attack. Detected security events may be handled by replacing a computing resource with a duplicate computing resource.

Description

Background technique [0001] Encryption is an important security component for every computing device and network system. The successful implementation of secure and efficient encryption protocols has created confidence among the general public that business computing networks and applications, such as shared computing resources and personal information applications, are secure. This confidence has driven dramatic growth in both industries. Illustrative shared computing resources include distributed computing systems (ie, cloud computing environments), while illustrative personal information applications include online banking and electronic commerce ("e-commerce") applications. [0002] Still, no security system is infallible. While conventional encryption systems are effective at thwarting direct attacks designed to, for example, obtain keys or to encrypt data, they remain vulnerable to certain indirect attacks such as side-channel attacks. Typically, side-channel attacks ...

AI Technical Summary

Problems solved by technology

Existing computer and network security architectures are not well designed to detect and respond to side channel attacks effectively, especially without introducing prohibitive costs and inefficiencies into the very systems they are designed to protect

Images