Memory and Cache Contention Denial-of-Service Attack in Mobile Edge Devices
Source abstract
Abstract
In this paper, we introduce a memory and cache contention denial-of-service attack and its hardware-based countermeasure. Our attack can significantly degrade the performance of the benign programs by hindering the shared resource accesses of the benign programs. It can be achieved by a simple C-based malicious code while degrading the performance of the benign programs by 47.6% on average. As another side-effect, our attack also leads to greater energy consumption of the system by 2.1× on average, which may cause shorter battery life in the mobile edge devices. We also propose detection and mitigation techniques for thwarting our attack. By analyzing L1 data cache miss request patterns, we effectively detect the malicious program for the memory and cache contention denial-of-service attack. For mitigation, we propose using instruction fetch width throttling techniques to restrict the malicious accesses to the shared resources. When employing our malicious program detection with the instruction fetch width throttling technique, we recover the system performance and energy by 92.4% and 94.7%, respectively, which means that the adverse impacts from the malicious programs are almost removed.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Parallel Computing and Optimization Techniques · Security and Verification in Computing · Advanced Malware Detection Techniques
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
School of Electronic and Electrical Engineering, Kyungpook National University, Daegu 41566, Korea
Funding
National Research Foundation of Korea
References (32)
Show source-provided references
1. Halpern, M., Zhu, Y., and Reddi, V.J. (2016, January 12–16). Mobile CPU’s rise to power: Quantifying the impact of generational mobile CPU design trends on performance, energy, and user satisfaction. Proceedings of the 2016 IEEE International Symposium on High Performance Computer Architecture (HPCA), Barcelona, Spain.10.1109/HPCA.2016.7446054 ↗
2. Yang, S.H., Lee, S., Lee, J.Y., Cho, J., Lee, H.J., Cho, D., Heo, J., Cho, S., Shin, Y., and Yun, S. (2012, January 19–23). A 32nm high-k metal gate application processor with GHz multi-core CPU. Proceedings of the 2012 IEEE International Solid-State Circuits Conference, San Francisco, CA, USA.10.1109/ISSCC.2012.6176980 ↗
3. Moscibroda, T., and Mutlu, O. (2007, January 6–10). Memory Performance Attacks: Denial of Memory Service in Multi-core Systems. Proceedings of the 16th USENIX Security Symposium on USENIX Security Symposium, Boston, MA, USA.
4. Woo, D.H., and Lee, H.H. (2007, January 11). Analyzing performance vulnerability due to resource denial of service attack on chip multiprocessors. Proceedings of the Workshop on Chip Multiprocessor Memory Systems and Interconnects in conjunction with the 13th Annual International Conference on High-Performance Architecture, Phoenix, AZ, USA.
5. Zhang, T., Zhang, Y., and Lee, R.B. (2017, January 2–6). DoS Attacks on Your Memory in Cloud. Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security (ASIA CCS’17), Abu Dhabi, United Arab Emirates.10.1145/3052973.3052978 ↗
6. Bechtel, M., and Yun, H. (2019, January 16–18). Denial-of-Service Attacks on Shared Cache in Multicore: Analysis and Prevention. Proceedings of the 2019 IEEE Real-Time and Embedded Technology and Applications Symposium (RTAS), Montreal, QC, Canada.10.1109/RTAS.2019.00037 ↗
7. Bechtel, M., and Yun, H. (2020). Memory-Aware Denial-of-Service Attacks on Shared Cache in Multicore Real-Time Systems. arXiv.10.1109/RTAS.2019.00037 ↗
8. Hasan, J., Jalote, A., Vijaykumar, T.N., and Brodley, C.E. (2005, January 12–16). Heat stroke: Power-density-based denial of service in SMT. Proceedings of the 11th International Symposium on High-Performance Computer Architecture, San Francisco, CA, USA.
9. On the Thermal Attack in Instruction Caches10.1109/TDSC.2009.16 ↗
10. Aciicmez, O. (2007, January 2). Yet another microarchitectural attack: Exploiting i-cache. Proceedings of the 2007 ACM Workshop on Computer Security Architecture, Fairfax, VA, USA.10.1145/1314466.1314469 ↗
11. Spreitzer, R., Griesmayr, S., Korak, T., and Mangard, S. (2016, January 18–22). Exploiting Data Usage Statistics for Website Fingerprinting Attacks on Android. Proceedings of the 9th ACM Conference on Security & Privacy in Wireless and Mobile Networks, WISEC 2016, Darmstadt, Germany.10.1145/2939918.2939922 ↗
12. Yarom, Y., Genkin, D., and Heninger, N. (2016, January 17–19). CacheBleed: A Timing Attack on OpenSSL Constant Time RSA. Proceedings of the Cryptographic Hardware and Embed ded Systems-CHES 2016-18th International Conference, Santa Barbara, CA, USA.10.1007/978-3-662-53140-2_17 ↗
13. Bernstein, D.J. (2018, January 04). Cache-timing attacks on AES. Available online: http://cr.yp.to/antiforgery/cachetiming-20050414.pdf.
14. Christodorescu, M., and Jha, S. (2003, January 4–8). Static Analysis of Executables to Detect Malicious Patterns. Proceedings of the 12th Conference on USENIX Security Symposium, Washington, DC, USA.
15. Christodorescu, M., Jha, S., Seshia, S.A., Song, D., and Bryant, R.E. (2005, January 8–11). Semantics-aware malware detection. Proceedings of the 2005 IEEE Symposium on Security and Privacy (S&P’05), Oakland, CA, USA.10.1109/SP.2005.20 ↗
16. Kinder, J., Katzenbeisser, S., Schallhart, C., and Veith, H. (2005, January 7–8). Detecting Malicious Code by Model Checking. Proceedings of the Second International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment, Vienna, Austria.10.1007/11506881_11 ↗
17. Learning to Detect and Classify Malicious Executables in the Wild
18. Schmidt, A.D., Bye, R., Schmidt, H.G., Clausen, J., Kiraz, O., Yuksel, K.A., Camtepe, S.A., and Albayrak, S. (2009, January 14–18). Static Analysis of Executables for Collaborative Malware Detection on Android. Proceedings of the 2009 IEEE International Conference on Communications, Dresden, Germany.10.1109/ICC.2009.5199486 ↗
19. Demme, J., Maycock, M., Schmitz, J., Tang, A., Waksman, A., Sethumadhavan, S., and Stolfo, S. (2013, January 23–27). On the Feasibility of Online Malware Detection with Performance Counters. Proceedings of the 40th Annual International Symposium on Computer Architecture, Tel-Aviv, Israel.10.1145/2485922.2485970 ↗
20. Ozsoy, M., Donovick, C., Gorelik, I., Abu-Ghazaleh, N., and Ponomarev, D. (2015, January 7–11). Malware-aware processors: A framework for efficient on-line malware detection. Proceedings of the 2015 IEEE 21st International Symposium on High Performance Computer Architecture (HPCA), Burlingame, CA, USA.10.1109/HPCA.2015.7056070 ↗
21. Eklov, D., Nikoleris, N., Black-Schaffer, D., and Hagersten, E. (2011, January 13–16). Cache Pirating: Measuring the Curse of the Shared Cache. Proceedings of the 2011 International Conference on Parallel Processing, Taipei, Taiwan.10.1109/ICPP.2011.15 ↗
22. Eklov, D., Nikoleris, N., Black-Schaffer, D., and Hagersten, E. (2013, January 23–27). Bandwidth Bandit: Quantitative characterization of memory contention. Proceedings of the 2013 IEEE/ACM International Symposium on Code Generation and Optimization (CGO), Shenzhen, China.10.1109/CGO.2013.6494987 ↗
23. Subramanian, L., Seshadri, V., Ghosh, A., Khan, S., and Mutlu, O. (2015, January 5–9). The application slowdown model: Quantifying and controlling the impact of inter-application interference at shared caches and main memory. Proceedings of the 2015 48th Annual IEEE/ACM International Symposium on Microarchitecture (MICRO), Waikiki, HI, USA.10.1145/2830772.2830803 ↗
24. (2017, July 15). ARM Processor Introduction. Cortex-A15 MPCore Processor. Available online: http://www.arm.com/products/processors/cortex-a/cortex-a15.php.
25. Large-Scale Analysis of Remote Code Injection Attacks in Android Apps
26. Online UAV-Mounted Edge Server Dispatching for Mobile-to-Mobile Edge Computing10.1109/JIOT.2019.2954798 ↗
27. Reddi, V.J. (2020, April 18). Mobile SoCs: The Wild West of Domain Specific Architectures. ACM SigArch, Computer Architecture Today. Available online: https://www.sigarch.org/mobile-socs/.
28. The Gem5 Simulator10.1145/2024716.2024718 ↗
29. SPEC CPU2006 Benchmark Tools10.1145/1241601.1241625 ↗
30. Li, S., Ahn, J.H., Strong, R.D., Brockman, J.B., Tullsen, D.M., and Jouppi, N.P. (2009, January 12–16). McPAT: An Integrated Power, Area, and Timing Modeling Framework for Multicore and Manycore Architectures. Proceedings of the 42nd Annual IEEE/ACM International Symposium on Microarchitecture, New York, NY, USA.10.1145/1669112.1669172 ↗
31. Jin, X., Hu, X., Ying, K., Du, W., Yin, H., and Peri, G.N. (2014, January 3–7). Code Injection Attacks on HTML5-based Mobile Apps: Characterization, Detection and Mitigation. Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security (CCS’14), Scottsdale, AZ, USA.10.1145/2660267.2660275 ↗
32. (2021, February 24). 5 Ways Your Mobile Device Can Get Malware. Available online: https://www.securitymetrics.com/blog/5-ways-your-mobile-device-can-get-malware.