A Compiler Assisted Scheduler for Detecting and Mitigating Cache-Based Side Channel Attacks
Sharjeel Khan, Girish Mururu, Santosh Pande

TL;DR
This paper presents Biscuit, a compiler-guided scheduler that detects and mitigates cache-based side channel attacks in multi-tenant server environments with high accuracy and low overhead.
Contribution
It introduces a novel compiler-assisted scheduling approach that predicts cache misses and detects anomalies to identify and mitigate cache-based side channel attacks in real-world settings.
Findings
Achieves an F-score of 1 for detecting certain cache attacks on cryptography algorithms.
Detects and mitigates attacks with less than 11% overhead during attack scenarios.
Reduces service degradation by up to 40% under attack conditions.
Abstract
Side channel attacks steal secret keys by cleverly leveraging information leakages and can, therefore, break encryption. Thus, detection and mitigation of side channel attacks is a very important problem, but the solutions proposed in the literature have limitations in that they do not work in a real-world multi-tenancy setting on servers, have high false positives, or have high overheads. In this work, we demonstrate a compiler guided scheduler, Biscuit, that detects cache-based side channel attacks for processes scheduled on multi-tenancy server farms. A key element of this solution involves the use of a cache-miss model which is inserted by the compiler at the entrances of loop nests to predict the cache misses of the corresponding loop. Such inserted library calls, or beacons, convey the cache miss information to the scheduler at run time, which uses it to co-schedule processes such…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsSecurity and Verification in Computing · Cryptographic Implementations and Security · Advanced Malware Detection Techniques
