Side channel attack defense method and device based on dynamic memory remapping and cache cleaning

Abstract

The invention relates to a side channel attack defense method and device based on dynamic memory remapping and cache cleaning. The method comprises the steps of collecting information of virtual machines operating on a virtual machine monitor, wherein the information at least comprises physical pages occupied by each virtual machine and protection memory submitted by the virtual machines; monitoring side channel attacks currently generated based on caches in real time, thereby obtaining attack target information, wherein the attack target information at least comprises attacked target virtual machines, attack frequencies and attacked cache layers; and selecting defense operation, wherein according to the defense operation, cache cleaning operation or memory dynamic remapping operation is selected according to the attacked cache layers in the attack target information. According to the method and the device, the operation efficiency of the virtual machine monitor is taken into consideration; targeted defense is carried out; resource waste is avoided; the security of a cloud computing industry is ensured; the side channel attacks based on the caches can be sensed in real time; and the efficient defense is realized on the basis of not influencing resource sharing to the greatest extent.

Description

technical field [0001] The invention belongs to the technical field of network security, and in particular relates to a side channel attack defense method and device thereof based on dynamic memory remapping and cache clearing. Background technique [0002] With the continuous development of the cloud computing industry, security issues in the cloud environment have received extensive attention. In order to improve resource utilization, cloud virtualization technology requires different tenants to share the underlying physical resources, so that one tenant can detect the behavior characteristics of another tenant accessing shared resources, speculate on the sensitive information of the target tenant, and implement side channel attacks. Among them, cache-based side-channel attacks are the most harmful due to their various implementation methods and reliable attack results. In recent years, experts in related fields have researched and implemented a variety of cache attacks, ...

AI Technical Summary

Problems solved by technology

[0004] Aiming at the deficiencies in the prior art, the present invention provides a side-channel attack defense method and device based on dynamic memory remapping and cache clearing, which effectively solves the problems of cloud resource sharing due to defense operations in the prior art, and has a better defensive effect

Images