【摘要】 缓存侧信道攻击的基础是程序针对不同敏感信息将访问不同的缓存地址.本文提出基于符号执行的缓存侧信道脆弱性检测技术,通过符号化敏感信息的数据传播过程定位潜在的脆弱点,并通过比较其可能的不同缓存访问地址,判断上述代码在缓存攻击中的可利用性.本文开发了原型系统CSCVulDiscover,并针对RSA等3种密码算法的12类实现代码进行测试,总共发现了125个脆弱点.更多还原

【Abstract】 The root cause of cache-based side-channel attacks is that the application will access different cache memory depending on different values of sensitive information.This paper proposes a symbolic-execution-based vulnerability detection technology to identify the code in an application that can be exploited in cache attacks.It analyzes program’s data propagation of symbolized sensitive information to locate candidate vulnerabilities,and determines the exploitability through comparison of different possible accessed cache addresses.A prototype system called CSCVulDiscover is developed and tested against 12 kinds of implementation of 3 popular cryptographic algorithms including RSA,and the result shows that 125 vulnerabilities are detected.更多还原