SGX-SSD：基于策略的版本控制SSD与英特尔SGX
SGX-SSD: A Policy-based Versioning SSD with Intel SGX
摘要：
本文证明，SSD，执行设备级版本控制，可以暴露于数据篡改攻击时，数据的保留时间小于恶意软件的停留时间。为了应对这种威胁，我们提出了SGX-SSD，这是一种基于SGX的版本控制SSD，它根据给定的策略选择性地保留文件历史。建议的系统采用英特尔SGX来实现版本策略管理系统，该系统可以免受高权限恶意软件的攻击。根据该策略，只有必要的数据被选择性地保存在SSD中，防止优先级较低的文件浪费空间，并确保重要文件的完整性。
英文摘要：
This paper demonstrates that SSDs, which perform device-level versioning, can be exposed to data tampering attacks when the retention time of data is less than the malware's dwell time. To deal with that threat, we propose SGX-SSD, a SGX-based versioning SSD which selectively preserves file history based on the given policy. The proposed system adopts Intel SGX to implement the version policy management system that is safe from high-privileged malware. Based on the policy, only the necessary data is selectively preserved in SSD that prevents files with less priority from wasting space and also ensures the integrity of important files.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
