Detecting Attacks that Exploit Meltdown and Spectre with Performance Counters
We worked on a detection technique for attacks that exploit Meltdown and Spectre by utilizing performance counters available in Intel processors. They measure cache misses — the state where data that an application requests for processing is not found in the cache memory — that can be used to detect attacks that exploit Meltdown and Spectre.
We hope this can complement how system administrators and information security professionals implement their patching strategies. It can also serve as an alternative mitigation method, particularly for systems whose patches may cause stability or performance issues.
The post Detecting Attacks that Exploit Meltdown and Spectre with Performance Counters appeared first on .
Source:
Detecting Attacks that Exploit Meltdown and Spectre with Performance Counters
