Extra work for better coverage of naive covert channel variability
This commit is contained in:
parent
10c1f4e5d5
commit
9a1d0837fa
1
Cargo.lock
generated
1
Cargo.lock
generated
@ -115,6 +115,7 @@ dependencies = [
|
|||||||
"covert_channels_evaluation",
|
"covert_channels_evaluation",
|
||||||
"flush_flush",
|
"flush_flush",
|
||||||
"flush_reload",
|
"flush_reload",
|
||||||
|
"nix",
|
||||||
]
|
]
|
||||||
|
|
||||||
[[package]]
|
[[package]]
|
||||||
|
@ -10,3 +10,6 @@ edition = "2018"
|
|||||||
covert_channels_evaluation = { path = "../covert_channels_evaluation" }
|
covert_channels_evaluation = { path = "../covert_channels_evaluation" }
|
||||||
flush_flush = { path = "../flush_flush" }
|
flush_flush = { path = "../flush_flush" }
|
||||||
flush_reload = { path = "../flush_reload" }
|
flush_reload = { path = "../flush_reload" }
|
||||||
|
nix = "0.18.0"
|
||||||
|
|
||||||
|
|
||||||
|
124
covert_channels_benchmark/src/bin/main-naive.rs
Normal file
124
covert_channels_benchmark/src/bin/main-naive.rs
Normal file
@ -0,0 +1,124 @@
|
|||||||
|
#![feature(unsafe_block_in_unsafe_fn)]
|
||||||
|
#![deny(unsafe_op_in_unsafe_fn)]
|
||||||
|
|
||||||
|
use std::io::{stdout, Write};
|
||||||
|
|
||||||
|
use covert_channels_evaluation::{benchmark_channel, CovertChannel, CovertChannelBenchmarkResult};
|
||||||
|
use flush_flush::naive::NaiveFlushAndFlush;
|
||||||
|
use flush_flush::{FlushAndFlush, SingleFlushAndFlush};
|
||||||
|
use flush_reload::naive::NaiveFlushAndReload;
|
||||||
|
use nix::sched::{sched_getaffinity, CpuSet};
|
||||||
|
use nix::unistd::Pid;
|
||||||
|
|
||||||
|
const NUM_BYTES: usize = 1 << 14; //20
|
||||||
|
|
||||||
|
const NUM_PAGES: usize = 1;
|
||||||
|
|
||||||
|
const NUM_PAGES_2: usize = 4;
|
||||||
|
|
||||||
|
const NUM_PAGE_MAX: usize = 32;
|
||||||
|
|
||||||
|
const NUM_ITER: usize = 32;
|
||||||
|
|
||||||
|
struct BenchmarkStats {
|
||||||
|
raw_res: Vec<CovertChannelBenchmarkResult>,
|
||||||
|
average_p: f64,
|
||||||
|
var_p: f64,
|
||||||
|
average_C: f64,
|
||||||
|
var_C: f64,
|
||||||
|
average_T: f64,
|
||||||
|
var_T: f64,
|
||||||
|
}
|
||||||
|
|
||||||
|
fn run_benchmark<T: CovertChannel + 'static>(
|
||||||
|
name: &str,
|
||||||
|
constructor: impl Fn(usize, usize) -> T,
|
||||||
|
num_iter: usize,
|
||||||
|
num_pages: usize,
|
||||||
|
) -> BenchmarkStats {
|
||||||
|
let mut results = Vec::new();
|
||||||
|
print!("Benchmarking {} with {} pages", name, num_pages);
|
||||||
|
let old = sched_getaffinity(Pid::from_raw(0)).unwrap();
|
||||||
|
for i in 0..CpuSet::count() {
|
||||||
|
for j in 0..CpuSet::count() {
|
||||||
|
for _ in 0..num_iter {
|
||||||
|
print!(".");
|
||||||
|
stdout().flush().expect("Failed to flush");
|
||||||
|
let channel = constructor(i, j);
|
||||||
|
let r = benchmark_channel(channel, num_pages, NUM_BYTES);
|
||||||
|
results.push(r);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
println!();
|
||||||
|
let mut average_p = 0.0;
|
||||||
|
let mut average_C = 0.0;
|
||||||
|
let mut average_T = 0.0;
|
||||||
|
for result in results.iter() {
|
||||||
|
println!("{:?}", result);
|
||||||
|
println!("C: {}, T: {}", result.capacity(), result.true_capacity());
|
||||||
|
average_p += result.error_rate;
|
||||||
|
average_C += result.capacity();
|
||||||
|
average_T += result.true_capacity()
|
||||||
|
}
|
||||||
|
average_p /= num_iter as f64;
|
||||||
|
average_C /= num_iter as f64;
|
||||||
|
average_T /= num_iter as f64;
|
||||||
|
println!(
|
||||||
|
"{} - {} Average p: {} C: {}, T: {}",
|
||||||
|
name, num_pages, average_p, average_C, average_T
|
||||||
|
);
|
||||||
|
let mut var_p = 0.0;
|
||||||
|
let mut var_C = 0.0;
|
||||||
|
let mut var_T = 0.0;
|
||||||
|
for result in results.iter() {
|
||||||
|
let p = result.error_rate - average_p;
|
||||||
|
var_p += p * p;
|
||||||
|
let C = result.capacity() - average_C;
|
||||||
|
var_C += C * C;
|
||||||
|
let T = result.true_capacity() - average_T;
|
||||||
|
var_T += T * T;
|
||||||
|
}
|
||||||
|
var_p /= num_iter as f64;
|
||||||
|
var_C /= num_iter as f64;
|
||||||
|
var_T /= num_iter as f64;
|
||||||
|
println!(
|
||||||
|
"{} - {} Variance of p: {}, C: {}, T:{}",
|
||||||
|
name, num_pages, var_p, var_C, var_T
|
||||||
|
);
|
||||||
|
BenchmarkStats {
|
||||||
|
raw_res: results,
|
||||||
|
average_p,
|
||||||
|
var_p,
|
||||||
|
average_C,
|
||||||
|
var_C,
|
||||||
|
average_T,
|
||||||
|
var_T,
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
fn main() {
|
||||||
|
for num_pages in 1..=32 {
|
||||||
|
let naive_ff = run_benchmark(
|
||||||
|
"Naive F+F",
|
||||||
|
|i, j| {
|
||||||
|
let mut r = NaiveFlushAndFlush::from_threshold(202);
|
||||||
|
r.set_cores(i, j);
|
||||||
|
r
|
||||||
|
},
|
||||||
|
NUM_ITER,
|
||||||
|
num_pages,
|
||||||
|
);
|
||||||
|
|
||||||
|
let fr = run_benchmark(
|
||||||
|
"F+R",
|
||||||
|
|i, j| {
|
||||||
|
let mut r = NaiveFlushAndReload::from_threshold(250);
|
||||||
|
r.set_cores(i, j);
|
||||||
|
r
|
||||||
|
},
|
||||||
|
NUM_ITER,
|
||||||
|
num_pages,
|
||||||
|
);
|
||||||
|
}
|
||||||
|
}
|
@ -13,6 +13,8 @@ use std::thread::current;
|
|||||||
pub struct NaiveFlushAndFlush {
|
pub struct NaiveFlushAndFlush {
|
||||||
pub threshold: u64,
|
pub threshold: u64,
|
||||||
current: HashMap<VPN, *const u8>,
|
current: HashMap<VPN, *const u8>,
|
||||||
|
main_core: CpuSet,
|
||||||
|
helper_core: CpuSet,
|
||||||
}
|
}
|
||||||
|
|
||||||
impl NaiveFlushAndFlush {
|
impl NaiveFlushAndFlush {
|
||||||
@ -20,6 +22,8 @@ impl NaiveFlushAndFlush {
|
|||||||
NaiveFlushAndFlush {
|
NaiveFlushAndFlush {
|
||||||
threshold,
|
threshold,
|
||||||
current: Default::default(),
|
current: Default::default(),
|
||||||
|
main_core: sched_getaffinity(Pid::from_raw(0)).unwrap(),
|
||||||
|
helper_core: sched_getaffinity(Pid::from_raw(0)).unwrap(),
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
unsafe fn test_impl(&self, addr: *const u8) -> Result<CacheStatus, SideChannelError> {
|
unsafe fn test_impl(&self, addr: *const u8) -> Result<CacheStatus, SideChannelError> {
|
||||||
@ -34,6 +38,14 @@ impl NaiveFlushAndFlush {
|
|||||||
Ok(CacheStatus::Hit)
|
Ok(CacheStatus::Hit)
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
pub fn set_cores(&mut self, main_core: usize, helper_core: usize) {
|
||||||
|
self.main_core = CpuSet::new();
|
||||||
|
self.main_core.set(main_core).unwrap();
|
||||||
|
|
||||||
|
self.helper_core = CpuSet::new();
|
||||||
|
self.helper_core.set(helper_core).unwrap();
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
impl SingleAddrCacheSideChannel for NaiveFlushAndFlush {
|
impl SingleAddrCacheSideChannel for NaiveFlushAndFlush {
|
||||||
@ -74,11 +86,11 @@ unsafe impl Sync for NaiveFlushAndFlush {}
|
|||||||
|
|
||||||
impl CoreSpec for NaiveFlushAndFlush {
|
impl CoreSpec for NaiveFlushAndFlush {
|
||||||
fn main_core(&self) -> CpuSet {
|
fn main_core(&self) -> CpuSet {
|
||||||
sched_getaffinity(Pid::from_raw(0)).unwrap()
|
self.main_core
|
||||||
}
|
}
|
||||||
|
|
||||||
fn helper_core(&self) -> CpuSet {
|
fn helper_core(&self) -> CpuSet {
|
||||||
sched_getaffinity(Pid::from_raw(0)).unwrap()
|
self.helper_core
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@ -13,6 +13,8 @@ use std::thread::current;
|
|||||||
pub struct NaiveFlushAndReload {
|
pub struct NaiveFlushAndReload {
|
||||||
pub threshold: u64,
|
pub threshold: u64,
|
||||||
current: HashMap<VPN, *const u8>,
|
current: HashMap<VPN, *const u8>,
|
||||||
|
main_core: CpuSet,
|
||||||
|
helper_core: CpuSet,
|
||||||
}
|
}
|
||||||
|
|
||||||
impl NaiveFlushAndReload {
|
impl NaiveFlushAndReload {
|
||||||
@ -20,6 +22,8 @@ impl NaiveFlushAndReload {
|
|||||||
NaiveFlushAndReload {
|
NaiveFlushAndReload {
|
||||||
threshold,
|
threshold,
|
||||||
current: Default::default(),
|
current: Default::default(),
|
||||||
|
main_core: sched_getaffinity(Pid::from_raw(0)).unwrap(),
|
||||||
|
helper_core: sched_getaffinity(Pid::from_raw(0)).unwrap(),
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
unsafe fn test_impl(&self, addr: *const u8) -> Result<CacheStatus, SideChannelError> {
|
unsafe fn test_impl(&self, addr: *const u8) -> Result<CacheStatus, SideChannelError> {
|
||||||
@ -35,6 +39,14 @@ impl NaiveFlushAndReload {
|
|||||||
Ok(CacheStatus::Hit)
|
Ok(CacheStatus::Hit)
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
pub fn set_cores(&mut self, main_core: usize, helper_core: usize) {
|
||||||
|
self.main_core = CpuSet::new();
|
||||||
|
self.main_core.set(main_core).unwrap();
|
||||||
|
|
||||||
|
self.helper_core = CpuSet::new();
|
||||||
|
self.helper_core.set(helper_core).unwrap();
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
impl SingleAddrCacheSideChannel for NaiveFlushAndReload {
|
impl SingleAddrCacheSideChannel for NaiveFlushAndReload {
|
||||||
@ -75,11 +87,11 @@ unsafe impl Sync for NaiveFlushAndReload {}
|
|||||||
|
|
||||||
impl CoreSpec for NaiveFlushAndReload {
|
impl CoreSpec for NaiveFlushAndReload {
|
||||||
fn main_core(&self) -> CpuSet {
|
fn main_core(&self) -> CpuSet {
|
||||||
sched_getaffinity(Pid::from_raw(0)).unwrap()
|
self.main_core
|
||||||
}
|
}
|
||||||
|
|
||||||
fn helper_core(&self) -> CpuSet {
|
fn helper_core(&self) -> CpuSet {
|
||||||
sched_getaffinity(Pid::from_raw(0)).unwrap()
|
self.helper_core
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user