Zeno：一种可扩展的基于能力的安全体系结构
Zeno: A Scalable Capability-Based Secure Architecture
摘要：
尽管安全研究人员做出了许多努力，但内存漏洞仍然是现代计算系统的首要问题。基于功能的解决方案旨在通过对每个内存引用的访问权限进行编码来解决硬件级别的整个内存漏洞类别。虽然一些能力系统已经被商业采用，但很少有人将能力模型应用于大型企业规模的系统。云计算和高性能计算通常需要程序在许多计算节点之间共享内存。这对现有的能力模型提出了挑战，因为能力必须跨多个节点执行。每个节点必须就某个功能具有哪些访问权限达成一致，并且远程内存访问的开销必须保持可管理。为了应对这些挑战，我们引入了Zeno，一种新的基于能力的架构。Zeno支持基于空间的能力模型，以支持大规模多节点系统中的全局共享能力。在这项工作中，我们描述了Zeno架构，定义了Zeno的安全属性，评估了Zeno作为大规模功能架构的可扩展性，并通过FPGA实现测量了硬件开销。
英文摘要：
Despite the numerous efforts of security researchers, memory vulnerabilities remain a top issue for modern computing systems. Capability-based solutions aim to solve whole classes of memory vulnerabilities at the hardware level by encoding access permissions with each memory reference. While some capability systems have seen commercial adoption, little work has been done to apply a capability model to datacenter-scale systems. Cloud and high-performance computing often require programs to share memory across many compute nodes. This presents a challenge for existing capability models, as capabilities must be enforceable across multiple nodes. Each node must agree on what access permissions a capability has and overheads of remote memory access must remain manageable. To address these challenges, we introduce Zeno, a new capability-based architecture. Zeno supports a Namespace-based capability model to support globally shareable capabilities in a large-scale, multi-node system. In this work, we describe the Zeno architecture, define Zeno's security properties, evaluate the scalability of Zeno as a large-scale capability architecture, and measure the hardware overhead with an FPGA implementation.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
