Cryptology ePrint Archive: Report 2016/1196
MASCAT: Stopping Microarchitectural Attacks Before Execution
Gorka Irazoqui and Thomas Eisenbarth and Berk Sunar
Abstract: Microarchitectural attacks have gained popularity in recent years since they use only standard resources, e.g. memory and cache access timing. Such privileges are available to applications at the lowest privilege levels. Further, microarchitectural attacks have proven successful on shared cloud instances across VMs, on smartphones with sandboxing, and on numerous embedded platforms.
Given the rise of malicious code in app stores and in online repositories it becomes essential to scan applications for such stealthy attacks. We present a static code analysis tool, MASCAT , capable of scanning for ever evolving microarchitectural attacks. Our proposed tool MASCAT can be used by app store service providers to perform large scale fully automated analysis of applications. The initial MASCAT suite is built to include attack vectors to cover popular cache/DRAM access attacks and Rowhammer. Further, our tool is easily extensible to cover newer attack vectors as they emerge.
Category / Keywords: Microarchitectural attacks, cache attacks, static code analysis
Date: received 29 Dec 2016, last revised 13 Jan 2017
Contact author: teisenbarth at wpi edu
Available format(s): PDF | BibTeX Citation
Version: 20170113:172516 (All versions of this report)
Short URL: ia.cr/2016/1196
Discussion forum: Show discussion | Start new discussion
[ Cryptology ePrint archive ]