Extra work for better coverage of naive covert channel variability

This commit is contained in:
Guillume DIDIER 2020-12-02 16:43:26 +01:00
parent 10c1f4e5d5
commit 9a1d0837fa
5 changed files with 156 additions and 4 deletions

1
Cargo.lock generated
View File

@ -115,6 +115,7 @@ dependencies = [
"covert_channels_evaluation",
"flush_flush",
"flush_reload",
"nix",
]
[[package]]

View File

@ -10,3 +10,6 @@ edition = "2018"
covert_channels_evaluation = { path = "../covert_channels_evaluation" }
flush_flush = { path = "../flush_flush" }
flush_reload = { path = "../flush_reload" }
nix = "0.18.0"

View File

@ -0,0 +1,124 @@
#![feature(unsafe_block_in_unsafe_fn)]
#![deny(unsafe_op_in_unsafe_fn)]
use std::io::{stdout, Write};
use covert_channels_evaluation::{benchmark_channel, CovertChannel, CovertChannelBenchmarkResult};
use flush_flush::naive::NaiveFlushAndFlush;
use flush_flush::{FlushAndFlush, SingleFlushAndFlush};
use flush_reload::naive::NaiveFlushAndReload;
use nix::sched::{sched_getaffinity, CpuSet};
use nix::unistd::Pid;
const NUM_BYTES: usize = 1 << 14; //20
const NUM_PAGES: usize = 1;
const NUM_PAGES_2: usize = 4;
const NUM_PAGE_MAX: usize = 32;
const NUM_ITER: usize = 32;
struct BenchmarkStats {
raw_res: Vec<CovertChannelBenchmarkResult>,
average_p: f64,
var_p: f64,
average_C: f64,
var_C: f64,
average_T: f64,
var_T: f64,
}
fn run_benchmark<T: CovertChannel + 'static>(
name: &str,
constructor: impl Fn(usize, usize) -> T,
num_iter: usize,
num_pages: usize,
) -> BenchmarkStats {
let mut results = Vec::new();
print!("Benchmarking {} with {} pages", name, num_pages);
let old = sched_getaffinity(Pid::from_raw(0)).unwrap();
for i in 0..CpuSet::count() {
for j in 0..CpuSet::count() {
for _ in 0..num_iter {
print!(".");
stdout().flush().expect("Failed to flush");
let channel = constructor(i, j);
let r = benchmark_channel(channel, num_pages, NUM_BYTES);
results.push(r);
}
}
}
println!();
let mut average_p = 0.0;
let mut average_C = 0.0;
let mut average_T = 0.0;
for result in results.iter() {
println!("{:?}", result);
println!("C: {}, T: {}", result.capacity(), result.true_capacity());
average_p += result.error_rate;
average_C += result.capacity();
average_T += result.true_capacity()
}
average_p /= num_iter as f64;
average_C /= num_iter as f64;
average_T /= num_iter as f64;
println!(
"{} - {} Average p: {} C: {}, T: {}",
name, num_pages, average_p, average_C, average_T
);
let mut var_p = 0.0;
let mut var_C = 0.0;
let mut var_T = 0.0;
for result in results.iter() {
let p = result.error_rate - average_p;
var_p += p * p;
let C = result.capacity() - average_C;
var_C += C * C;
let T = result.true_capacity() - average_T;
var_T += T * T;
}
var_p /= num_iter as f64;
var_C /= num_iter as f64;
var_T /= num_iter as f64;
println!(
"{} - {} Variance of p: {}, C: {}, T:{}",
name, num_pages, var_p, var_C, var_T
);
BenchmarkStats {
raw_res: results,
average_p,
var_p,
average_C,
var_C,
average_T,
var_T,
}
}
fn main() {
for num_pages in 1..=32 {
let naive_ff = run_benchmark(
"Naive F+F",
|i, j| {
let mut r = NaiveFlushAndFlush::from_threshold(202);
r.set_cores(i, j);
r
},
NUM_ITER,
num_pages,
);
let fr = run_benchmark(
"F+R",
|i, j| {
let mut r = NaiveFlushAndReload::from_threshold(250);
r.set_cores(i, j);
r
},
NUM_ITER,
num_pages,
);
}
}

View File

@ -13,6 +13,8 @@ use std::thread::current;
pub struct NaiveFlushAndFlush {
pub threshold: u64,
current: HashMap<VPN, *const u8>,
main_core: CpuSet,
helper_core: CpuSet,
}
impl NaiveFlushAndFlush {
@ -20,6 +22,8 @@ impl NaiveFlushAndFlush {
NaiveFlushAndFlush {
threshold,
current: Default::default(),
main_core: sched_getaffinity(Pid::from_raw(0)).unwrap(),
helper_core: sched_getaffinity(Pid::from_raw(0)).unwrap(),
}
}
unsafe fn test_impl(&self, addr: *const u8) -> Result<CacheStatus, SideChannelError> {
@ -34,6 +38,14 @@ impl NaiveFlushAndFlush {
Ok(CacheStatus::Hit)
}
}
pub fn set_cores(&mut self, main_core: usize, helper_core: usize) {
self.main_core = CpuSet::new();
self.main_core.set(main_core).unwrap();
self.helper_core = CpuSet::new();
self.helper_core.set(helper_core).unwrap();
}
}
impl SingleAddrCacheSideChannel for NaiveFlushAndFlush {
@ -74,11 +86,11 @@ unsafe impl Sync for NaiveFlushAndFlush {}
impl CoreSpec for NaiveFlushAndFlush {
fn main_core(&self) -> CpuSet {
sched_getaffinity(Pid::from_raw(0)).unwrap()
self.main_core
}
fn helper_core(&self) -> CpuSet {
sched_getaffinity(Pid::from_raw(0)).unwrap()
self.helper_core
}
}

View File

@ -13,6 +13,8 @@ use std::thread::current;
pub struct NaiveFlushAndReload {
pub threshold: u64,
current: HashMap<VPN, *const u8>,
main_core: CpuSet,
helper_core: CpuSet,
}
impl NaiveFlushAndReload {
@ -20,6 +22,8 @@ impl NaiveFlushAndReload {
NaiveFlushAndReload {
threshold,
current: Default::default(),
main_core: sched_getaffinity(Pid::from_raw(0)).unwrap(),
helper_core: sched_getaffinity(Pid::from_raw(0)).unwrap(),
}
}
unsafe fn test_impl(&self, addr: *const u8) -> Result<CacheStatus, SideChannelError> {
@ -35,6 +39,14 @@ impl NaiveFlushAndReload {
Ok(CacheStatus::Hit)
}
}
pub fn set_cores(&mut self, main_core: usize, helper_core: usize) {
self.main_core = CpuSet::new();
self.main_core.set(main_core).unwrap();
self.helper_core = CpuSet::new();
self.helper_core.set(helper_core).unwrap();
}
}
impl SingleAddrCacheSideChannel for NaiveFlushAndReload {
@ -75,11 +87,11 @@ unsafe impl Sync for NaiveFlushAndReload {}
impl CoreSpec for NaiveFlushAndReload {
fn main_core(&self) -> CpuSet {
sched_getaffinity(Pid::from_raw(0)).unwrap()
self.main_core
}
fn helper_core(&self) -> CpuSet {
sched_getaffinity(Pid::from_raw(0)).unwrap()
self.helper_core
}
}