PCG: Mitigating Conflict-based Cache Side-channel Attacks with Prefetching
Fang Jiang, Fei Tong, Hongyu Wang, Xiaoyu Cheng, Zhe Zhou, Ming Ling,, Yuxing Mao

TL;DR
This paper introduces PCG, a novel prefetching-based scheme that effectively mitigates conflict-based cache side-channel attacks by generating indistinguishable cache access patterns, achieving robust security with minimal performance impact.
Contribution
The paper presents PCG, a new prefetching scheme that combines cache occupancy manipulation to enhance security against cache attacks without significant performance loss.
Findings
PCG outperforms existing solutions in security robustness.
PCG achieves an average of 1.64% performance improvement.
PCG incurs only 1.26% hardware overhead.
Abstract
To defend against conflict-based cache side-channel attacks, cache partitioning or remapping techniques were proposed to prevent set conflicts between different security domains or obfuscate the locations of such conflicts. But such techniques complicate cache design and may result in significant performance penalties. Therefore, there have been lightweight prefetching-based schemes proposed to introduce noise to confuse attackers' observation. However, we have validated experimentally that relying on prefetching to only introduce noise is insufficient, as attackers can still reliably distinguish the victim's cache accesses. This paper proposes a novel prefetching-based scheme, called PCG. It combines adding victim-irrelevant cache occupancy changes and reducing victim-relevant cache occupancy changes to disrupt attackers by generating noisy and indistinguishable cache access patterns.…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsSecurity and Verification in Computing · Cryptographic Implementations and Security · Advanced Data Storage Technologies
