Quantifying and Mitigating Cache Side Channel Leakage with Differential Set

on YouTube ↗17m

" summary

Introduces a new abstraction differential set and a tool DSA that both measures and removes cache side‑channel leakage by aligning sibling memory accesses, taking Cartesian products of local sets, and refining with past conditions to rule out impossible traces. DSA uses CBMC for pointer resolution, computes an upper bound then tightens it (example: naive product 18 → refined traces 4 → 2 bits leaked), reports ground‑truth leakage on benchmarks where CacheAudit overestimates, and produces mitigated code with 6.7% of leaking accesses hardened instead of touching whole arrays.

AI-written summary · about

" chapters (16)

1. 0:00Cache side channel research intro
2. 1:03Cache channels leak data
3. 2:08Modeling side channels
4. 3:56Trace abstraction limits
5. 4:38Differential set abstraction
6. 6:04Global differential set
7. 7:28Local differential sets
8. 8:10Mitigating leakage
9. 9:35Security verification
10. 10:18Refining differential sets
11. 11:00Branch alignment
12. 12:26Quantification evaluation
13. 13:07Leakage case studies
14. 13:50Mitigation case studies
15. 14:36Conclusion and future
16. 14:56Q&A

" related talks

• 15mSpecSafe: Detecting Cache Side Channels in a Speculative WorldDanfeng Zhang, Gang Tan, Mahmut Taylan Kandemir, Robert Brotzman-Smith · OOPSLA 2021
• 27mCacheD: Identifying Cache-Based Timing Channels in Production SoftwarePei Wang, Xiao Liu, Danfeng Zhang, Shuai Wang, Dinghao Wu · 26th USENIX Security Symposium (USENIX Security '17)
• 15mI Know What You Said: Unveiling Hardware Cache Side-Channels in Local LargeZibo Gao, Junjie Hu, Feng Guo, Yixin Zhang, Yinglong Han, Siyuan Liu, Haiyang Li, Zhiqiang Lv · USENIX Security '25
• 13mExposing Cache Timing Side-Channel Leaks through Out-of-Order Symbolic ExecutionPeng Li, Yueqi Chen, Zhiqiang Zuo, Shengjian Guo, Jiyong Yu, Meng Wu, Yueqiang Cheng, Huibo Wang, Huibo Wang · OOPSLA 2020
• 25mHardening Confidential Federated Computations against Side-Channel AttacksAlbert Cheu · Trust in Decentralized Systems 2026
• 01h 01mTutorial: Side-Channel Attacks and Transient Execution Vulnerab...Allison Randal, Giorgos Christou · RISC-V Summit 2022
• 28mStrong and Efficient Cache Side-Channel Protection...Felix Schuster, Daniel Gruss, Manuel Costa, Julian Lettner, Olya Ohrimenko, Istvan Haller · 26th USENIX Security Symposium (USENIX Security '17)
• 20mA Formal Model of Cache Speculation Side-ChannelsCatalin Marinas · TLA+ Community Event 2020