Of the many interesting articles in this issue of IEEE Design&Test , one particular article by Zhou et al. grabbed my attention. The article showed that hardware performance counters, which count instances of microarchitectural events, cannot distinguish between a system in normal operation and a system under attack. One reason given is the gap between the functional behavior of a system and the behavior at the microarchitectural level. Therefore, it is best to look for incursions at the functional level and distinguish good from any suspicious behavior there.

中文翻译：

---

安全始于家庭

在许多 本期有趣的文章 IEEE设计与测试 ，Zhou等人的一篇特别文章。引起了我的注意。该文章表明，对微体系结构事件的实例进行计数的硬件性能计数器无法区分正常运行的系统和受攻击的系统。给出的一个原因是系统的功能行为与微体系结构级别的行为之间存在差距。因此，最好在功能级别上查找入侵，并从那里的任何可疑行为中区分出良好行为。