Multi-process concurrency is effective in improving program efficiency and maximizing CPU utilization. The correct execution of concurrency is ensured by the mutual exclusion and synchronization mechanism (MESM) that manages the shared hardware and software resources. We propose MES-Attacks, a new set of software-controlled covert channel attacks based on MESM to transmit confidential information. MES-Attacks offer several advantages: 1) the covert channels are constructed at software level and can be deployed on any hardware; 2) closed share of resource ensures the quality of the channels with low interference and makes them hard to be detected; and 3) it utilizes the system's software resources which are abound and hence difficult to isolate. We built covert channels using different MESMs on Windows and Linux, including Event, Timer, FileLockEX, Mutex, Semaphore and flock. Experimental results demonstrate that these covert channels can achieve transmission rate of 13.105 kb/s, 12.383 kb/s, and 6.552 kb/s, respectively in the scenarios of local, cross-sandbox and cross-VM, where the bit error rates are all under 1\%.
翻译：多进程组合货币在提高程序效率和最大限度地利用CPU方面是有效的,通过管理共享硬件和软件资源的相互排斥和同步机制(MESM),确保正确执行同值货币。我们提议使用MES-Atacktacks,这是一套以MESM为基础的由软件控制的新的秘密频道攻击系统,以传输机密信息。MES-Atacks提供若干好处:(1) 秘密渠道是在软件一级建造的,可以安装在任何硬件上;(2) 封闭的资源份额确保低干扰的频道质量,使其难以检测;(3) 该系统的软件资源具有广度,因此难以分离。我们利用不同的MESMs在Windows和Linux上建立了秘密渠道,包括事件、Timer、FileLockEX、Mutex、Semapophore和群。实验结果表明,这些秘密渠道可以达到13.105 kb/s、12.83 kb/s和6.552 kb/s的传输率,这在地方、交叉箱和交叉VM的情景下,这些位错误率都低于1 。
相关内容
微信扫码咨询专知VIP会员