Design of virtual machine Cache side channel attack detection method based on MINE algorithm

At present, the research on Cache SCA (side channel attack) pays more attention to the realization of attacks and the defense field, while the research on Cache SCA detection field has just been paid attention to in recent years, with relatively few research results and imperfect detection scheme. In this paper, a detection method of virtual machine Cache SCA based on MINE algorithm is proposed. Firstly, information is collected, and then the collected files are extracted according to the defined event format, cleaned and standardized, and then structured event metadata is formed, so that the characteristics of these hidden channels can be highlighted for processing. Then merge the events, and merge the events that meet certain conditions into an event stream from a large number of events. The research results show that the method in this paper can clearly distinguish between attack programs and benign programs, and the response time of attack detection methods to different Cache SCA programs is slightly different, and the attack programs can be responded and processed within 1 second at the earliest. Experiments show that the detection method has a high detection rate, and does not occupy too much system resources during operation, and can respond and handle Cache SCA quickly without degrading the performance of the operating system.