IRO：完整性和可靠性增强环ORAM
IRO: Integrity and Reliability Enhanced Ring ORAM
摘要：
存储器安全性和可靠性是云计算系统中的两个主要设计关注点。最先进的内存安全性-可靠性协同设计（例如Synergy）在性能、机密性、完整性和可靠性方面取得了良好的平衡。然而，这些工作仅仅依赖于加密来确保数据机密性，这已被证明无法防止来自存储器访问模式的信息泄漏。Ring ORAM是一种很有吸引力的机密保护协议，可以向不可信的存储系统隐藏存储器访问模式。不幸的是，它与安全性-可靠性协同设计不兼容。强制组合将导致更严重的性能损失。在本文中，我们提出了IRO，一个完整性和可靠性增强的环形ORAM设计。为了减少完整性验证的开销，我们提出了一种低开销的完整性树RIT，并使用最小更新子树（MUST）来减少元数据更新开销。为了提高存储器的可靠性，我们提出了安全复制为ORAM树提供通道级的容错能力，并使用镜像通道技术来保证MUST的可靠性。最后，我们利用错误校正指标（ECP）来修复永久性存储单元故障，以进一步提高元件的可靠性与寿命。使用紧凑的元数据设计来减少ECP的存储和咨询开销。IRO提供了强大的安全性和可靠性保证，而由此产生的存储和性能开销非常小。我们的评估表明，IRO只增加了7.54%的执行时间平均比基线下的两个通道四AES-GCM单位设置。在有足够的AES-GCM单元执行并行MAC计算的情况下，IRO可以减少Baseline的2.14%的执行时间。
英文摘要：
Memory security and reliability are two of the major design concerns in cloud computing systems. State-of-the-art memory security-reliability co-designs (e.g. Synergy) have achieved a good balance on performance, confidentiality, integrity, and reliability. However, these works merely rely on encryption to ensure data confidentiality, which has been proven unable to prevent information leakage from memory access patterns. Ring ORAM is an attractive confidential protection protocol to hide memory access patterns to the untrusted storage system. Unfortunately, it does not compatible with the security-reliability co-designs. A forced combination would result in more severe performance loss. In this paper, we propose IRO, an Integrity and Reliability enhanced Ring ORAM design. To reduce the overhead of integrity verification, we propose a low overhead integrity tree RIT and use a Minimum Update Subtree Tree (MUST) to reduce metadata update overhead. To improve memory reliability, we present Secure Replication to provide channel-level error resilience for the ORAM tree and use the mirrored channel technique to guarantee the reliability of the MUST. Last, we use the error correction pointer (ECP) to repair permanent memory cell fault to further improve device reliability and lifetime. A compact metadata design is used to reduce the storage and consulting overhead of the ECP. IRO provides strong security and reliability guarantees, while the resulting storage and performance overhead is very small. Our evaluation shows that IRO only increases 7.54% execution time on average over the Baseline under two channels four AES-GCM units setting. With enough AES-GCM units to perform concurrent MAC computing, IRO can reduce 2.14% execution time of the Baseline.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
