信息安全研究 ›› 2023, Vol. 9 ›› Issue (4): 347-.

• 学术论文 • 上一篇    下一篇

面向乱序执行漏洞测试的ARM处理器核隔离方法

赵旭1王佳慧2张伟1马利民1   

  1. 1(北京信息科技大学计算机学院北京100101)
    2(国家信息中心信息与网络安全部北京100045)
  • 出版日期:2023-04-01 发布日期:2023-03-30
  • 通讯作者: 赵旭 硕士研究生.主要研究方向为处理器安全. 18618263473@163.com
  • 作者简介:赵旭 硕士研究生.主要研究方向为处理器安全. 18618263473@163.com 王佳慧 博士,研究员.主要研究方向为云计算安全、大数据安全、云提取安全. wangjiahui@sic.gov.cn 张伟 博士,教授.主要研究方向为大数据处理与软硬件协同设计. zhwei@bistu.edu.cn 马利民 博士,副教授.主要研究方向为网络安全协议、信息隐藏技术、大数据安全. markgoogle@qq.com

Core Isolation Method of ARM Processor for OutofOrder Execution  Vulnerability Test

  • Online:2023-04-01 Published:2023-03-30

摘要: 随着spectre,meltdown为代表的处理器微架构漏洞的发现,微架构安全漏洞逐渐引起了学术界的关注,针对相关微架构漏洞的自动化测试方案陆续出台.但是在真实的测试环境中,测试微架构环境会被中断或被调度系统打断干扰,造成有效测试用例的遗漏.因此提出面向乱序执行漏洞测试的ARM处理器核隔离方法.该方法通过利用ARM处理器与Linux内核对中断及调度的管理机制及相应的进程同步机制,在测试过程中将处理器核隔离出中断与调度系统,保证测试指令块的运行不会被中断及调度程序打断,并通过设计相应的同步机制保证进程切换过程中不会被其他进程插入执行,保证测试的有效性.

关键词: 瞬态执行, 乱序执行漏洞测试, 中断, 内核调度器, Linux内核

Abstract: With the discovery of processor microarchitecture vulnerabilities represented by spectre and meltdown, microarchitecture security vulnerabilities have gradually attracted the attention of academia, and automatic testing schemes for related microarchitecture vulnerabilities have also been proposed. However, in the real test environment, the test microarchitecture environment will be interrupted and disturbed by the scheduling system, resulting in the omission of effective test cases. Therefore, this paper proposes an arm processor core isolation method for outoforder execution test. By using the management mechanism of interrupt and scheduling between ARM processor and Linux kernel and designing the corresponding process synchronization mechanism, this method can isolate the processor core from the interrupt and scheduling system during the test process, so as to ensure that the operation of test instruction block will not be interrupted by interrupt and scheduling program. The corresponding synchronization mechanism is designed to ensure that the process switching process will not be inserted and executed by other processes, so as to ensure the effectiveness of the test.

Key words: transient execution, outoforder vulnerabilities test, interrupt, kernel scheduler, Linux kernel

中图分类号: