1700
100%

Ran 17 Apr 2016 02:13AM UTC

Jobs 1

Files 64

Run time 2s

Badge

Embed ▾

pending completion

Build # 1700

Build Type

push

travis-ci

Committed by

ben-manes

Commit Message

CASSANDRA-11452: Stronger resistence to hash collision attacks

Thanks to further discussions with the Cassandra and TinyLFU folks,
this is a fairly strong guard against the collision attack. This also
has very low overhead and impact to existing hit rates. The previous
commit was fairly weak in comparison.

We concluded that some randomness was desirable in either the admission
or eviction policy. A few of the better options were simulated and this
is my favorite balance. It might change when Roy presents his feedback
from pondering it on his long flight home.

The attack requires that the victim be pinned to an artifically high
frequency due to a hash collision, so that no entries are admitted.
When a warm candidate is rejected by the frequency filter, we give it
a 1% chance of being accepted anyway. This kicks out the attacker's
victim and protects well against her having multiple collisions in her
arsenal. In small and large traces it is rarely triggered due to normal
usage, and does not admit too frequency to hurt the hit rate.

The other attack vector is the sketch's hash functions. This is already
protected with a random seed. We now protect against the weak 32-bit
hash codes used by Java.

Coverage Stats

5083 of 5371 relevant lines covered (94.64%)

0.95 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	1700.1 (TERM=dumb)	17 Apr 2016 02:13AM UTC	0	94.64	Travis Job 1700.1

Source Files on build 1700

Detailed source file information is not available for this build.

ben-manes / caffeine / 1700
100%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 1700

ben-manes / caffeine / 1700 100%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 1700

ben-manes / caffeine / 1700
100%

README BADGES
x