ClearCache: configurable, lightweight, and accurate cache side-channel attack detection
摘要
Cache Side-Channel Attacks (CSCAs) pose a significant risk to data security by leveraging Leakage Patterns (LPs) to extract sensitive information. Detection strategies frequently employ software-based solutions utilizing hardware performance counters and machine learning. However, these approaches often encounter issues with accuracy, performance overhead, evasion by advanced attacks, and complexity. There are limited hardware-based solutions, primarily relying on assertions that suffer from high false positives rate and poor real-world attack detection. This paper presents ClearCache, which augments a conventional cache with a Cache Global History Table (CGHT) for LP matching and CSCA detection. Detection warnings of CSCAs are essential to prevent data breaches, enabling proactive measures such as cache flushing or terminating malicious processes. Experimental results show that ClearCache detects CSCAs quickly and accurately, with minimal false positives and low hardware overhead, making it suitable for security verification and integration with baseline caches.