Leveraging KVM Events to Detect Cache-Based Side Channel Attacks in a Virtualization Environment

Table 1

List of all collected scenarios for evaluation.

Positive class	Negative class
	Standard Op.	CPU Intensive Op.
Prime + Probe (Gruss)	Idle	Stress CPU
Flush + Reload (Gruss)	RUBiS 20 clients	Stress memory
Flush + Flush (Gruss)	RUBiS 200 clients	Binary tree
Flush + Reload (Yarom)	RUBiS 2000 clients	Lucas-Lehmer
Flush + Reload (Hornby)	Mail server	Urandom generator