Walnut：一个低信任度的企业行动平台
Walnut: A low-trust trigger-action platform
摘要：
触发动作平台是一种将物联网设备与Web服务连接起来的新型系统。例如，流行的IFTTT平台可以将Fitbit与谷歌日历连接起来，根据睡眠历史添加就寝时间提醒。然而，这些平台存在机密性和完整性风险，因为它们在公共云基础设施上运行并计算敏感的用户数据。本文介绍了核桃的设计，实施和评估，低信任的密码操作平台，模仿IFTTT的功能，同时确保数据的机密性和计算的正确性，在一个低资源成本。Walnut的关键使能器是一种新的两方安全计算协议，该协议（i）有效地执行字符串替换，这是一种常见的计算，并且（ii）在来自不同供应商的异构可信硬件机器上复制计算，以确保计算输出的正确性，只要其中一台机器不受损害。对Walnut的评估表明，它相对于不安全的基线具有合理的可部署性和低开销--除了一小部分程序外，所有程序的CPU开销是3.6倍，网络开销是4.3倍。
英文摘要：
Trigger-action platforms are a new type of system that connect IoT devices with web services. For example, the popular IFTTT platform can connect Fitbit with Google Calendar to add a bedtime reminder based on sleep history. However, these platforms present confidentiality and integrity risks as they run on public cloud infrastructure and compute over sensitive user data. This paper describes the design, implementation, and evaluation of Walnut, a low-trust trigger-action platform that mimics the functionality of IFTTT, while ensuring confidentiality of data and correctness of computation, at a low resource cost. The key enabler for Walnut is a new two-party secure computation protocol that (i) efficiently performs strings substitutions, which is a common computation in trigger-action platform workloads, and (ii) replicates computation over heterogeneous trusted-hardware machines from different vendors to ensure correctness of computation output as long as one of the machines is not compromised. An evaluation of Walnut demonstrates its plausible deployability and low overhead relative to a non-secure baseline--3.6x in CPU and 4.3x in network for all but a small percentage of programs.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
