安全外包计算的公平市场
Fair Marketplace for Secure Outsourced Computations
摘要:
云计算范例为客户端提供对计算资源的共享池的无处不在的按需访问,从而使客户端能够以最小的管理工作来提供可扩展的服务。然而,这样的资源池通常由单个服务提供商拥有和控制,使其成为单点故障。本文介绍了Kosto -一个框架,提供了一个公平的市场,安全的外包计算,其中的计算资源池聚合资源提供了一个大的独立计算节点的队列。Kosto使用可信硬件的安全区执行(尤其是英特尔SGX)保护客户输入的机密性以及外包计算及其结果的完整性。此外,Kosto保证客户为执行外包计算而支付的费用与计算节点为客户请求提供服务的工作之间的公平交换。对Kosto原型实现的实证评估表明,对于计算密集型操作,安全区执行产生的性能开销小至3%,对于IO密集型操作,性能开销为1.5倍。
英文摘要:
The cloud computing paradigm offers clients ubiquitous and on demand access to a shared pool of computing resources, enabling the clients to provision scalable services with minimal management effort. Such a pool of resources, however, is typically owned and controlled by a single service provider, making it a single-point-of-failure. This paper presents Kosto - a framework that provisions a fair marketplace for secure outsourced computations, wherein the pool of computing resources aggregates resources offered by a large cohort of independent compute nodes. Kosto protects the confidentiality of clients' inputs as well as the integrity of the outsourced computations and their results using trusted hardware's enclave execution, in particular Intel SGX. Furthermore, Kosto warrants fair exchanges between the clients' payments for the execution of an outsourced computations and the compute nodes' work in servicing the clients' requests. Empirical evaluation on the prototype implementation of Kosto shows that performance overhead incurred by enclave execution is as small as 3% for computation-intensive operations, and 1.5x for IO-intensive operations.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。