Vizard: Passing Over Profiling-Based Detection by Manipulating Performance Counters

Cache side-channel attacks have been serious security threats to server computer systems, thus researchers proposed software-based defense approaches that can detect the attacks. Profiling-based detectors are lightweight detection solutions rely on hardware performance counters identify unique cache behaviors by The typically need set appropriate criteria differentiate between attack processes and normal applications. In this paper, we explore limitations of profiling-based counters.We present an scenario, called Vizard, bypass existing manipulating process. Our analysis discloses include idle periods be exploited as windows for creating events. Vizard generates counterbalancing events within hide particular evaluation exhibits effectively while maintaining high success rates. research work represents attackers counters.