Anomalous cache coherence transaction detection in a heterogeneous system

1. A method for mitigating security vulnerabilities in a heterogeneous computing system, by a processor, comprising:

dynamically detecting anomalous cache coherence behavior between a host and one or more accelerators using a cache controller at a shared last level cache based upon a pair-based coherence messages functioning as a proxy for indicating one or more security attack protocols; wherein dynamically detecting the anomalous cache coherence behavior includes:

using a first table at the cache controller for dynamically tracking the pair-based coherence messages and comparing the pair-based coherence messages based on a set of allowed responses for a selected type of coherence messages for the pair-based coherence messages;

using a second table at the cache controller for tracking and detecting the one or more accelerators as a potential cause of the one or more security attack protocols;

updates the second table with an identifier of the one or more accelerators upon detecting one or more security attack protocols; and

deleting an entry from the first table upon completion of a pair-based coherence message transaction.

2. The method of claim 1 , further including comparing the pair-based coherence messages based on a set of allowed responses for a selected type of coherence messages for the pair-based coherence messages, wherein the pair-based coherence messages include an incoming coherence message and an outgoing coherence message between the host and the one or more accelerators.

3. The method of claim 1 , further including indicating an exception to the pair-based coherence messages based upon comparing the pair-based coherence messages based on a set of allowed responses for a selected type of coherence messages.

4. The method of claim 1 , further including marking the one or more accelerators as a potential cause of the one or more security attack protocols based upon comparing the pair-based coherence messages based on a set of allowed responses for a selected type of coherence messages.

5. The method of claim 1 , further including increasing a frequency over a selected period of time of comparing the pair-based coherence messages based on a set of allowed responses for a selected type of coherence messages for the pair-based coherence messages.

6. The method of claim 1 , further including

updating the second table with an identifier of the one or more accelerators upon detecting one or more security attack protocols.

7. A system for mitigating security vulnerabilities in a heterogeneous computing system, the system comprising:

one or more computers with executable instructions that when executed cause the system to:

dynamically detect anomalous cache coherence behavior between a host and one or more accelerators using a cache controller at a shared last level cache based upon a pair-based coherence messages functioning as a proxy for indicating one or more security attack protocols; wherein dynamically detecting the anomalous cache coherence behavior includes:

using a first table at the cache controller for dynamically tracking the pair-based coherence messages and comparing the pair-based coherence messages based on a set of allowed responses for a selected type of coherence messages for the pair-based coherence messages;

using a second table at the cache controller for tracking and detecting the one or more accelerators as a potential cause of the one or more security attack protocols;

updates the second table with an identifier of the one or more accelerators upon detecting one or more security attack protocols; and

deleting an entry from the first table upon completion of a pair-based coherence message transaction.

8. The system of claim 7 , wherein the executable instructions compare the pair-based coherence messages based on a set of allowed responses for a selected type of coherence messages for the pair-based coherence messages, wherein the pair-based coherence messages include an incoming coherence message and an outgoing coherence message between the host and the one or more accelerators.

9. The system of claim 7 , wherein the executable instructions indicate an exception to the pair-based coherence messages based upon comparing the pair-based coherence messages based on a set of allowed responses for a selected type of coherence messages.

10. The system of claim 7 , wherein the executable instructions mark the one or more accelerators as a potential cause of the one or more security attack protocols based upon comparing the pair-based coherence messages based on a set of allowed responses for a selected type of coherence messages.

11. The system of claim 7 , wherein the executable instructions increase a frequency over a selected period of time of comparing the pair-based coherence messages based on a set of allowed responses for a selected type of coherence messages for the pair-based coherence messages.

12. The system of claim 7 , wherein the executable instructions

update the second table with an identifier of the one or more accelerators upon detecting one or more security attack protocols.

13. A computer program product for mitigating security vulnerabilities in a heterogeneous computing system, by a processor, the computer program product embodied on a non-transitory computer-readable storage medium having computer-readable program code portions stored therein, the computer-readable program code portions comprising:

an executable portion that dynamically detects anomalous cache coherence behavior between a host and one or more accelerators using a cache controller at a shared last level cache based upon a pair-based coherence messages functioning as a proxy for indicating one or more security attack protocols; wherein dynamically detecting the anomalous cache coherence behavior includes:

using a first table at the cache controller for dynamically tracking the pair-based coherence messages and comparing the pair-based coherence messages based on a set of allowed responses for a selected type of coherence messages for the pair-based coherence messages;

using a second table at the cache controller for tracking and detecting the one or more accelerators as a potential cause of the one or more security attack protocols;

updates the second table with an identifier of the one or more accelerators upon detecting one or more security attack protocols; and

deleting an entry from the first table upon completion of a pair-based coherence message transaction.

14. The computer program product of claim 13 , further including an executable portion that compares the pair-based coherence messages based on a set of allowed responses for a selected type of coherence messages for the pair-based coherence messages, wherein the pair-based coherence messages include an incoming coherence message and an outgoing coherence message between the host and the one or more accelerators.

15. The computer program product of claim 13 , further including an executable portion that indicates an exception to the pair-based coherence messages based upon comparing the pair-based coherence messages based on a set of allowed responses for a selected type of coherence messages.

16. The computer program product of claim 13 , further including an executable portion that:

marks the one or more accelerators as a potential cause of the one or more security attack protocols based upon comparing the pair-based coherence messages based on a set of allowed responses for a selected type of coherence messages.

17. The computer program product of claim 13 , further including an executable portion that increases a frequency over a selected period of time of comparing the pair-based coherence messages based on a set of allowed responses for a selected type of coherence messages for the pair-based coherence messages.