Recognition method of processor chip false security dependency conflict based on cache hit status

Abstract

The invention provides a method for identifying false security dependency conflicts of a processor chip based on a cache hit state, which belongs to the field of processor microarchitecture design, in order to reduce the speculative execution mechanism under the premise of ensuring defense against speculative execution loopholes based on cache side channels The performance loss caused by the introduction of security features in this method, by distinguishing the reasons for the change of the cache state in the attack, using the locality of the cache structure, only a small change in the cache is required, and no information about the operating system or software system is required. The software is transparent, and at the same time, attackers cannot use the software to interfere with the judgment of such false security dependencies.

Description

technical field [0001] The invention belongs to the field of processor micro-architecture design, and relates to a method for designing a safe processor micro-architecture based on a cache hit state for identifying false security dependency conflicts. Background technique [0002] Speculative execution is one of the basic performance optimization measures to improve instruction parallelism in high-performance processors. However, the disclosure of the "Specter" class vulnerability reveals that there are security risks in the speculative execution technology in the existing high-performance processors. In different application scenarios from mobile to cloud, almost all commercial high-performance processors face the risk of being attacked by attackers to steal sensitive information within a wrongly speculated window period. [0003] The generation of "ghost" vulnerabilities depends on two points. 1) The processor uses speculative execution to reduce the performance loss cau...

AI Technical Summary

Problems solved by technology

However, static analysis is difficult to guarantee coverage, and dynamic analysis consumes a lot of time

In order to further describe the connection between the speculative execution side channel and the speculative execution instruction, the security dependency establishes a dependency relationship between the trigger speculative execution operation and the speculative execution instruction ahead, but simply blocks the memory access operation that is marked as suspicious according to the dependency analysis. will cause severe performance degradation

Images