Cache hit state-based processor chip false security dependency conflict identification method

Abstract

The invention provides a cache hit state-based processor chip false security dependency conflict identification method, and belongs to the field of processor microarchitecture design. On the premise that it is guaranteed that speculative execution vulnerability based on a cache side channel is defended, the performance loss caused by introducing safety characteristics into a speculation executionmechanism is reduced; according to the method, reasons of cache state changes in attacks are distinguished, the locality of a cache structure is utilized, only small changes need to be made on the cache, an operating system or software system information is not needed, the method is transparent to software, and meanwhile an attacker cannot utilize the software to intervene in judgment of pseudo-security dependencies.

Description

technical field [0001] The invention belongs to the field of processor micro-architecture design, and relates to a method for designing a safe processor micro-architecture based on a cache hit state for identifying false security dependency conflicts. Background technique [0002] Speculative execution is one of the basic performance optimization measures to improve instruction parallelism in high-performance processors. However, the disclosure of the "Specter" class vulnerability reveals that there are security risks in the speculative execution technology in the existing high-performance processors. In different application scenarios from mobile to cloud, almost all commercial high-performance processors face the risk of being attacked by attackers to steal sensitive information within a wrongly speculated window period. [0003] The generation of "ghost" vulnerabilities depends on two points. 1) The processor uses speculative execution to reduce the performance loss cau...

AI Technical Summary

Problems solved by technology

However, static analysis is difficult to guarantee coverage, and dynamic analysis consumes a lot of time

In order to further describe the connection between the speculative execution side channel and the speculative execution instruction, the security dependency establishes a dependency relationship between the trigger speculative execution operation and the speculative execution instruction ahead, but simply blocks the memory access operation that is marked as suspicious according to the dependency analysis. will cause severe performance degradation

Images