MemShuffle: Protecting Memory From End-To-End

In this paper, we present MemShuffle, an end-to-end mem-ory protection scheme that resists several attacks on cur-rent memory systems. Our protection scheme provides se-curity against both side channel attacks on caches, as well as physical on-bus memory snooping, to keep memory secrets within the process that owns them. Our approach utilizes micro-architecture changes in the CPU’s Memory Manage-ment Unit (MMU) to create a secret per-page memory map-ping from virtual address offsets to physical address offsets. This approach minimizes programmer effort, while incurring an average overhead of only 2.5%. 1