基于改进帕累托法则的CPU时钟指纹模型
FMAP: CPU Clock Fingerprint Model Based on Advanced Pareto Principle
基于软件信息的设备指纹,例如浏览器指纹,具有易被修改,鲁棒性差的特点,为弥补基于软件信息构建的设备指纹的不足,本文提出基于CPU时钟特性的硬件指纹。CPU内部时钟使用石英晶体制成振荡器,这些晶体中的微小变化会导致时钟频率的微小但可测量的差异。以函数执行时间作为CPU时钟指纹的基础表达,在CPU负载较低的情况下其分布遵循帕累托法则。提出根据CPU负载自适应调整的改进的帕累托法则,构造鲁棒性更高的CPU时钟指纹模型,基于改进的帕累托法则的CPU时钟指纹模型CFMAP(CPU Clock Fingerprint Model Based on Advanced Pareto Principle)。CFMAP解决了现有CPU时钟指纹在高负载下不稳定的问题。实验证明:CFMAP在实验中的平均的拒真率(false rejection rate, FRR)为1.32%,容假率(false acceptance rate, FAR)为2.52%。
evice fingerprints based on software information, such as browser fingerprints, have the characteristics of easy modification and poor robustness. In order to make up for the shortcomings of device fingerprints based on software information, this paper proposes hardware fingerprints based on CPU clock characteristics. The internal clock of the CPU uses quartz crystals to make oscillators. Small changes in these crystals can cause small but measurable differences in the clock frequency. Use the fCFMAP: CPU Clock Fingerprint Model Based on Advanced Pareto Principleunction execution time as the basic expression of the CPU clock fingerprint, and its distribution follows the Pareto Principle, under low CPU load. Proposes an advanced Pareto Principle that is adaptively adjusted according to the CPU load, and constructs a more robust CPU clock fingerprint model, CFMAP (CPU Clock Fingerprint Model Based on Advanced Pareto). CFMAP solves the problem of instability of existing CPU clock fingerprints under high load. Experiments show that the average False Rejection Rate (FRR) is 1.32%, and the False Acceptance Rate (FAR) is 2.52%.
庞仁宇、芦效峰
计算技术、计算机技术
网络空间安全设备识别PU时钟
yberspace SecurityDevice identificationCPU clock
庞仁宇,芦效峰.基于改进帕累托法则的CPU时钟指纹模型[EB/OL].(2022-04-20)[2025-08-21].http://www.paper.edu.cn/releasepaper/content/202204-251.点此复制
评论