SoK: Secure FPGA Multi-Tenancy in the Cloud: Challenges and Opportunities
SoK: Secure FPGA Multi-Tenancy in the Cloud: Challenges and Opportunities
复制标题
SoK：云端安全 FPGA 多租户：挑战与机遇
DOI：
10.1109/eurosp51992.2021.00040
复制
发表时间：
2021
期刊：
影响因子：
--
通讯作者：
S. Zeitouni
中科院分区：
文献类型：
--
作者：
Ghada Dessouky;A. Sadeghi;S. Zeitouni
野外可编程栅极阵列（FPGA）越来越多地部署在数据中心中，因为它们对ASIC或GPU的固有灵活性使它们成为迅速发展的深度学习以及其他技术和其他技术和算法的理想处理单元。为了最大程度地利用云中的利用，研究人员提出了空间多租户部署模型，其中FPGA织物在相互不信任的租户中同时共享。这是通过利用FPGA的部分重新配置能力来实现的。在本文中，我们将云计算设置中多租户FPGA的研究工作系统化，并突出其对手模型，安全保证以及其基本安全性和与隐私相关的缺点。我们进一步对现有的研究工作进行了分类，这些研究作品展示了与受害者共享物理资源的恶意租户对多租户FPGA的一系列远程探索的物理攻击。通过全面调查端到端的多租户FPGA部署，我们透露，这些攻击仅代表问题的一个维度，而各种开放的安全和隐私挑战仍然没有解决。我们以对未来研究挑战和开放机会的见解结束。
Field Programmable Gate Arrays (FPGAs) are increasingly deployed in datacenters due to their inherent flexibility over ASICs or GPUs that makes them an ideal processing unit for emerging and dynamic area of deep learning and other techniques and algorithms that are rapidly evolving. To maximize their utilization in the cloud, researchers have proposed the spatial multi-tenant deployment model, where the FPGA fabric is simultaneously shared among mutually distrusting tenants. This is enabled by leveraging the partial reconfiguration capability of FPGAs. In this paper, we systematize the research work on multi-tenant FPGAs in cloud computing settings and highlight their adversary models, security guarantees, as well as their fundamental security and privacy related shortcomings. We further categorize existing research works that demonstrate a new class of remotely-exploitable physical attacks on multi-tenant FPGAs by malicious tenants sharing physical resources with the victims. Through investigating end-to-end multi-tenant FPGA deployment comprehensively, we reveal that these attacks represent only one dimension of the problem, while various open security and privacy challenges remain unaddressed. We conclude with our insights on future research challenges and open opportunities.