What are the valid reasons for a user program to execute a cache flush instruction in the first place? As the article lists that as a requirement for successful exploitation of this issue, just checking for that instruction in a binary might be a good start.