Cache Side Channel Attack - Exploitability and Countermeasures

This presentation explains the exploitability of three cache side-channel attacks—Flush + Reload, Evict + Reload, and Prime + Probe—and demonstrates AES key recovery. It also compares countermeasures including cache-leakage-free code, page coloring, cache allocation, and behavior detection across cloud, browser, smartphone, and trusted-execution environments.

Syllabus

Intro
Feasibility Trend
Cache Architecture
Flush Reload Attack
Evict + Reload Attack Summary
Prime + Probe Attack Summary
How to retrieve information?
Attack Comparison
Demo: AES Key Recovery Across VMS
Browser Javascript
Smart Phone Applications
Trust Execution Environment
Design Cache Leakage Free Code
Page Coloring
Cache Allocation Technology
Behavior Detection
Countermeasure Comparison (Requirements)
Countermeasure Comparison (Coverage)
Key Takeaways