summaryrefslogtreecommitdiffstats
path: root/README
diff options
context:
space:
mode:
authorLouis Burda <quent.burda@gmail.com>2023-02-03 11:59:43 -0600
committerLouis Burda <quent.burda@gmail.com>2023-02-03 11:59:43 -0600
commit1715c9d6e1aa977b407081fb3164edbf1534fb5c (patch)
tree1802d90d850164f2387098c238214641b75e86e9 /README
parent0c825583fc20f1b91c56e1aaf450d6a753d24658 (diff)
downloadcachepc-1715c9d6e1aa977b407081fb3164edbf1534fb5c.tar.gz
cachepc-1715c9d6e1aa977b407081fb3164edbf1534fb5c.zip
Properly implement target gfn stepping
Diffstat (limited to 'README')
-rw-r--r--README23
1 files changed, 15 insertions, 8 deletions
diff --git a/README b/README
index 10fab7d..76f9090 100644
--- a/README
+++ b/README
@@ -22,24 +22,31 @@ test/kvm-eviction:
Demonstrate that the cache set of a memory access instruction can be
inferred in non-SEV / SEV / SEV-ES / SEV-SNP -enabled vms respectively.
+test/kvm-pagestep:
+ Demonstrate that a SEV-SNP enabled vm can be quickly single-stepped
+ and analyzed by tracking a single page at a time. This type
+ of tracking creates a page-wise profile of the guests execution,
+ which can be used to infer what the guest is doing and when to begin
+ fine-grained single-stepping.
+
test/kvm-step:
Demonstrate that SEV-SNP enabled vms can be single-stepped using local
APIC timers to interrupt the guest and increment the interrupt interval
while observing the RIP+RFLAGS ciphertext in the VMSA for changes to
detect that a single instruction has been executed.
-test/kvm-pagestep:
- Demonstrate that a SEV-SNP enabled vm can be quickly single-stepped
- and analyzed by tracking a single page at a time. This type
- of tracking creates a page-wise profile of the guests execution,
- which can be used to infer what the guest is doing and to begin
- fine-grained single-stepping.
+test/kvm-targetstep:
+ Demonstrate that a combination of page- and singlestepping allows
+ for fine-grained control of when to single-step. In this case a vmmcall
+ by the guest alerts the host to when the guest is on a critical page.
+ The host sets the currently executed gfn as the target and begins
+ single-stepping only on that page.
test/qemu-pagestep:
Replicate result from kvm-pagestep on a qemu-based vm running debian.
-test/qemu-eviction:
- Replicate result from kvm-eviction on a qemu-based vm running debian
+test/qemu-targetstep:
+ Replicate result from kvm-targetstep on a qemu-based vm running debian
using a specially crafted guest program to signal when measurement
should take place to infer the accessed set.