基于动态资源使用策略的SMT执行端口侧信道安全防护

同时多线程(simultaneous multi-threading, SMT)技术是提升线程级并行度的重要微架构优化技术之一，SMT技术能够在1个物理核上实现2个逻辑核，提升处理器的整体性能.然而，以共享执行端口为代表的SMT环境下特有的时间侧信道安全问题也陆续出现.提出了一种基于动态资源使用策略的SMT环境下执行端口时间侧信道攻击防护方法，基于SMT技术对数据结构资源的不同处理方式设计动态策略调整算法，通过改进处理器端口绑定及调度选择算法以防护SMT环境下执行端口时间侧信道攻击.防护设计实现了端口冲突矩阵、分支过滤器和动态资源使用策略修改器3个组件，该方法在防护有效性上可以达到关闭SMT技术的防护效果且性能开销大大降低，同时硬件开销可控，具有较高的应用价值.

SMT Port Side Channel Defending Method Based on Dynamic Resource Usage Strategy

Simultaneous multi-threading (SMT) technology is one of the important micro-architecture optimization technologies to improve thread-level parallelism. SMT can realize two logical cores on one physical core and improve the overall performance of the processor. However, some timing channel security problems represented by sharing execution ports in SMT environment appeared. A port timing channel attack defending method is proposed based on dynamic resource usage strategy in SMT environment. Dynamic strategy adjustment algorithm is designed for different processing modes of data structure resources, and improved processor port binding and scheduling selection algorithm are adopted to protect the port side channel attack in SMT environment. Defending method used modular design has realized the port conflict matrix, branch filters and dynamic resource editor strategy. Respectively judgment model for port conflict, branch information filtering and SMT dynamic resource use strategy changes, the final modification strategy can be directly applied to the execution port binding and scheduling algorithm. The defending method in this paper can achieve the effect of close SMT technology and reduce the performance cost greatly. At the same time, its hardware cost is controllable. Therefore, the method proposed in this study has high application value.