简化安全持久非易失性存储器的完整性树更新
Streamlining Integrity Tree Updates for Secure Persistent Non-Volatile Memory
摘要：
新兴的非易失性主存储器（NVMM）正迅速集成到计算机系统中。但是，NVMM容易受到潜在的数据残留和重放攻击。已建立的安全模型，包括分裂计数器模式加密和Bonsai Merkle树（BMT）认证已被引入对这样的数据完整性攻击。但是，这些安全方法并不容易与NVMM兼容。最近关于安全NVMM的工作指出，需要以原子方式持久化数据及其元数据，包括计数器、消息身份验证代码（MAC）和BMT。然而，内存持久化模型对于安全的NVMM来说被忽视了，这对于崩溃可恢复性至关重要。在这项工作中，我们分析了需要确保的不变量，以支持安全NVMM的崩溃恢复。我们强调，以前的研究大大低估了BMT持久性的成本，并提出了几种优化技术，以减少原子持久更新BMT的开销。提出的优化探索使用流水线，乱序写入，更新合并，同时符合严格或历元持久化模型分别。我们评估了我们的工作，并表明我们提出的优化显着降低了安全NVMM的性能开销与崩溃可恢复性。
英文摘要：
Emerging non-volatile main memory (NVMM) is rapidly being integrated into computer systems. However, NVMM is vulnerable to potential data remanence and replay attacks. Established security models including split counter mode encryption and Bonsai Merkle tree (BMT) authentication have been introduced against such data integrity attacks. However, these security methods are not readily compatible with NVMM. Recent works on secure NVMM pointed out the need for data and its metadata, including the counter, the message authentication code (MAC), and the BMT to be persisted atomically. However, memory persistency models have been overlooked for secure NVMM, which is essential for crash recoverability. In this work, we analyze the invariants that need to be ensured in order to support crash recovery for secure NVMM. We highlight that prior research has substantially under-estimated the cost of BMT persistence and propose several optimization techniques to reduce the overhead of atomically persisting updates to BMTs. The optimizations proposed explore the use of pipelining, out-of-order writes, and update coalescing while conforming to strict or epoch persistency models respectively. We evaluate our work and show that our proposed optimizations significantly reduce the performance overhead of secure NVMM with crash recoverability.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
