TY - GEN
T1 - Run-Time Detection of Prime + Probe Side-Channel Attack on AES Encryption Algorithm
AU - Mushtaq, Maria
AU - Akram, Ayaz
AU - Bhatti, Muhammad Khurram
AU - Rais, Rao Naveed Bin
AU - Lapotre, Vianney
AU - Gogniat, Guy
N1 - Publisher Copyright:
© 2018 IEEE.
PY - 2018/7/2
Y1 - 2018/7/2
N2 - This paper presents a run-Time detection mechanism for access-driven cache-based Side-Channel Attacks (CSCAs) on Intel's x86 architecture. We demonstrate the detection capability and effectiveness of proposed mechanism on Prime+Probe attcks. The mechanism comprises of multiple machine learning models, which use real-Time data from the HPCs for detection. Experiments are performed with two different implementations of AES cryptosystem while under Prime+Probe attack. We provide results under stringent design constraints such as: realistic system load conditions, real-Time detection accuracy, speed, system-wide performance overhead and distribution of error (i.e., false positives and negatives) for the used machine learning models. Our results show detection accuracy of > 99% for Prime+Probe attack with performance overhead of 3-4% at the highest detection speed, i.e., within 1-2% completion of 4800 AES encryption rounds needed to complete a successful attack.
AB - This paper presents a run-Time detection mechanism for access-driven cache-based Side-Channel Attacks (CSCAs) on Intel's x86 architecture. We demonstrate the detection capability and effectiveness of proposed mechanism on Prime+Probe attcks. The mechanism comprises of multiple machine learning models, which use real-Time data from the HPCs for detection. Experiments are performed with two different implementations of AES cryptosystem while under Prime+Probe attack. We provide results under stringent design constraints such as: realistic system load conditions, real-Time detection accuracy, speed, system-wide performance overhead and distribution of error (i.e., false positives and negatives) for the used machine learning models. Our results show detection accuracy of > 99% for Prime+Probe attack with performance overhead of 3-4% at the highest detection speed, i.e., within 1-2% completion of 4800 AES encryption rounds needed to complete a successful attack.
KW - AES
KW - Cryptography
KW - Detection
KW - HPCs
KW - Machine Learning
KW - Side-Channel Attacks
KW - prime+Probe
U2 - 10.1109/GIIS.2018.8635767
DO - 10.1109/GIIS.2018.8635767
M3 - Conference contribution
AN - SCOPUS:85062887684
T3 - 2018 Global Information Infrastructure and Networking Symposium, GIIS 2018
BT - 2018 Global Information Infrastructure and Networking Symposium, GIIS 2018
PB - Institute of Electrical and Electronics Engineers Inc.
T2 - 2018 Global Information Infrastructure and Networking Symposium, GIIS 2018
Y2 - 23 October 2018 through 25 October 2018
ER -