RANDOMIZATION OF PROCESSOR SUBUNIT TIMING TO ENHANCE SECURITY

摘要

Technologies are generally provided for a system to enhance security and prevent side channel attacks of targeted functions. Side channel attacks assume that the targeted functions operate at same speed each time, and observe timing data of the targeted functions to glean secure information. According to some examples, an enhanced security system may alter a processing speed of one or more subunits of a processor executing the targeted function(s) to transparently change an instantaneous performance of the processor in an unpredictable manner. The performance time of the targeted function(s) may thereby be randomized. A virtual machine manager (VMM) may identify a security risk for a targeted function, and trigger one or more subunits of the processor to operate at a reduced frequency. After completion of the targeted function, the subunits may be returned to a default performance speed.

主权项

1. A method to enhance security of targeted functions, the method comprising:
determining a preferred security timing obscuration; detecting initiation of execution of a targeted function at a processor; detuning a performance of one or more subunits of the processor associated with the targeted function based on the security timing obscuration; determining whether the targeted function is still in operation; and in response to a determination that the targeted function has completed operation, returning the performance of the one or more subunits to a previous state before the detuning.