Investigating Black-Box Function Recognition Using Hardware Performance Counters. (arXiv:2204.11639v4 [cs.CR] UPDATED)

This paper presents new methods and results for recognising black-box program
functions using hardware performance counters (HPC), where an investigator can
invoke and measure function calls. Important use cases include analysing
compiled libraries, e.g. static and dynamic link libraries, and trusted
execution environment (TEE) applications. We develop a generic approach to
classify a comprehensive set of hardware events, e.g. branch mis-predictions
and instruction retirements, to recognise standard benchmarking and
cryptographic library functions. This includes various signing, verification
and hash functions, …

box hardware performance recognition