English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Shared processor caches are vulnerable to conflict-based side-channelattacks, where an attacker can monitor access patterns of a victim by evictingvictim cache lines using cache-set conflicts. Recent mitigations proposerandomized mapping of addresses to cache lines to obfuscate the locations ofset-conflicts. However, these are vulnerable to new attacks that discoverconflicting sets of addresses despite such mitigations, because these designsselect eviction-candidates from a small set of conflicting lines.  This paper presents Mirage, a practical design for a fully associative cache,wherein eviction candidates are selected randomly from all lines resident inthe cache, to be immune to set-conflicts. A key challenge for enabling suchdesigns in large shared caches (containing tens of thousands of cache lines) isthe complexity of cache-lookup, as a naive design can require searching throughall the resident lines. Mirage achieves full-associativity while retainingpractical set-associative lookups by decoupling placement and replacement,using pointer-based indirection from tag-store to data-store to allow a newlyinstalled address to globally evict the data of any random resident line. Toeliminate set-conflicts, Mirage provisions extra invalid tags in askewed-associative tag-store design where lines can be installed withoutset-conflict, along with a load-aware skew-selection policy that guarantees theavailability of sets with invalid tags. Our analysis shows Mirage provides theglobal eviction property of a fully-associative cache throughout systemlifetime (violations of full-associativity, i.e. set-conflicts, occur less thanonce in 10^4 to 10^17 years), thus offering a principled defense against anyeviction-set discovery and any potential conflict based attacks. Mirage incurslimited slowdown (2%) and 17-20% extra storage compared to a non-secure cache.

MIRAGE: Mitigating Conflict-Based Cache Attacks with a Practical Fully-Associative Design