CIBPU: A Conflict-Invisible Secure Branch Prediction Unit
Zhe Zhou, Fei Tong, Hongyu Wang, Xiaoyu Cheng, Fang Jiang, Zhikun, Zhang, Yuxing Mao

TL;DR
This paper introduces CIBPU, a secure branch prediction unit that prevents conflict detection by attackers without significant performance loss, using innovative storage, indexing, and encryption techniques.
Contribution
CIBPU is a novel SBPU design that employs conflict-invisible mechanisms and encryption without periodic key updates, enhancing security with minimal performance overhead.
Findings
CIBPU achieves 1.12%-2.20% performance overhead in gem5 simulations.
CIBPU causes only 2.01% performance degradation on FPGA implementation.
CIBPU outperforms existing SBPU schemes in security and efficiency.
Abstract
Previous schemes for designing secure branch prediction unit (SBPU) based on physical isolation can only offer limited security and significantly affect BPU's prediction capability, leading to prominent performance degradation. Moreover, encryption-based SBPU schemes based on periodic key re-randomization have the risk of being compromised by advanced attack algorithms, and the performance overhead is also considerable. To this end, this paper proposes a conflict-invisible SBPU (CIBPU). CIBPU employs redundant storage design, load-aware indexing, and replacement design, as well as an encryption mechanism without requiring periodic key updates, to prevent attackers' perception of branch conflicts. We provide a thorough security analysis, which shows that CIBPU achieves strong security throughout the BPU's lifecycle. We implement CIBPU in a RISC-V core model in gem5. The experimental…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsData Quality and Management · Scientific Computing and Data Management · Network Security and Intrusion Detection
