Research Article

Leveraging KVM Events to Detect Cache-Based Side Channel Attacks in a Virtualization Environment

Table 2

The arrangement of scenario datasets for the binary SVM evaluation.

Trained class Untrained class
Positive classNegative class Positive class Negative class

Prime + Probe (Gruss) and Flush + Reload (Gruss) and Flush + Reload (Yarom) scenarios are combined into one datasetIdle and RUBiS 20 clients and RUBiS 200 clients and stress CPU and stress memory scenarios are combined into one dataset Flush + Flush (Gruss) RUBiS 2000 clients
Flush + Reload (Hornby) Mail server
Urandom generator
Lucas-Lehmer
Binary tree