Cache attack monitoring and defending method, electronic equipment and system

Abstract

The invention relates to the technical field of security, in particular to a cache attack monitoring and defending method, electronic equipment and a system, and the method comprises the following steps: obtaining a current process and starting time of the current process; recording the end time of the current process and the refreshing times corresponding to the current process; determining a time interval based on the starting time and the ending time; when the time interval is between a first threshold value and a second threshold value and the number of refresh times is larger than a preset number of refresh times, the current process is determined to be a malicious process to prevent the refresh operation of the current process, the first threshold value is between a first refresh interval and a second refresh interval, the first refresh interval is a normal refresh interval, and the second refresh interval is a Spcetry attack interval; the second threshold is between a third refresh interval and a fourth refresh interval, the third refresh interval is a Flush and Time attack interval, and the fourth refresh interval is a Flush and Reload attack interval. By combining the time interval and the refreshing times, whether the attack is a hostile attack or not can be confirmed in real time.

Description

technical field [0001] The invention relates to the field of security technology, in particular to a monitoring and defense method of cache attack, an electronic device and a system. Background technology [0002] When the information system and software system rely on specific physical equipment, a variety of physical state information such as electromagnetic radiation, sound, time, computer CPU memory operation and so on will be generated. As a typical side channel attack method, cache side channel attack is based on the analysis of the highly interactive and shared memory state between CPU cache processes during program operation, and uses the characteristics of different memory access time and cache access time to crack the cryptosystem. [0003] The concealment and destructive power of cache side channel attack are very strong, but there are still many deficiencies in the current defense measures against cache side channel attack, especially in the arm architecture, the defe...

AI Technical Summary

Problems solved by technology

[0004] In view of this, the embodiments of the present invention provide a cache attack monitoring and defense method, electronic equipment and system to solve the problem of cache attack monitoring accuracy

Images