使用 PSL 实现轻量、安全且有状态的无服务器计算
Lightweight, Secure and Stateful Serverless Computing with PSL
AI总结：
提出面向 TEE 的有状态 FaaS 框架 PSL，结合 SGX2 动态内存映射、enclave 内 WASM JIT 与分布式机密存储，实现最高 3.7 倍加速。
摘要：
我们提出 PSL，这是一个面向可信执行环境（TEE）的轻量、安全且有状态的功能即服务（FaaS）框架。该框架在异构 TEE 硬件上为静态编译的二进制文件和/或 WebAssembly（WASM）字节码提供丰富的编程语言支持，并通过熟悉的键值存储（KVS）接口访问安全、高性能且嵌入网络的存储。它利用 Intel SGX2 的动态内存映射能力创建具有即时（JIT）编译的 enclave 内 WASM 运行时，从而实现接近原生的执行速度。PSL 被设计为可在包含分布式防篡改机密存储系统的异步环境中高效运行，并假设发生少数故障。系统在各节点之间交换最终一致的状态更新，同时利用释放一致锁机制增强事务能力。PSL 的执行速度最高比当前最先进的 SGX WASM 运行时快 3.7 倍。在 YCSB 100% 读取工作负载下，PSL 达到 95k ops/s；在 50% 读/写工作负载下达到 89k ops/s。我们通过深度神经网络安全分布式训练的案例研究，展示了 PSL 的可扩展性和适应性。
英文摘要：
We present PSL, a lightweight, secure and stateful Function-as-a-Serivce (FaaS) framework for Trusted Execution Environments (TEEs). The framework provides rich programming language support on heterogeneous TEE hardware for statically compiled binaries and/or WebAssembly (WASM) bytecodes, with a familiar Key-Value Store (KVS) interface to secure, performant, network-embedded storage. It achieves near-native execution speeds by utilizing the dynamic memory mapping capabilities of Intel SGX2 to create an in-enclave WASM runtime with Just-In-Time (JIT) compilation. PSL is designed to efficiently operate within an asynchronous environment with a distributed tamper-proof confidential storage system, assuming minority failures. The system exchanges eventually-consistent state updates across nodes while utilizing release-consistent locking mechanisms to enhance transactional capabilities. The execution of PSL is up to 3.7x faster than the state-of-the-art SGX WASM runtime. PSL reaches 95k ops/s with YCSB 100% read workload and 89k ops/s with 50% read/write workload. We demonstrate the scalability and adaptivity of PSL through a case study of secure and distributed training of deep neural networks.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
