Using SGX-Based Virtual Clones for IoT Security
Using SGX-Based Virtual Clones for IoT Security
复制标题
使用基于 SGX 的虚拟克隆实现物联网安全
DOI：
--
复制
发表时间：
2018
期刊：
影响因子：
--
通讯作者：
M. Zulfiqar
中科院分区：
文献类型：
--
作者：
Rashid Tahir;A. Raza;Fareed Zaffar;Faizan Ul Ghani;M. Zulfiqar
物联网设备广泛渗透到我们的日常生活中，为物联网生态系统带来了各种各样的安全和隐私问题。由于资源限制、特设网络模型和以供应商为中心的数据收集和共享策略，传统的主机和网络安全机制无法解决这些问题。因此，有必要重新设计物联网基础设施，以保护设备和数据。为此，我们提出了一种设计，即用户坐在驾驶座上，设备较少暴露，数据共享模型灵活且细粒度。我们的建议包括基于英特尔软件保护扩展（SGX）的硬件安全数据库，以将数据存储在云中，而无需信任云提供商。在这些数据库上运行的设备的虚拟克隆（影子）作为实际物联网设备的有效代理，隐藏了设备的弱点。提议的基础设施是可伸缩的和健壮的，可以作为社区构建和改进的良好的第一步。
Widespread permeation of IoT devices into our daily lives has created a diverse spectrum of security and privacy concerns unique to the IoT ecosystem. Conventional host and network security mechanisms fail to address these issues due to resource constraints, ad-hoc network models and vendor-centric data collection and sharing policies. Hence, there is a need to redesign the IoT infrastructure to secure both the device and the data. To this end, we propose a design where users are in the driving seat, devices are less exposed and data sharing models are flexible and fine-grained. Our proposal comprises hardware-secured data banks based on Intel Software Guard Extensions (SGX) to house the data in clouds without the need to trust the cloud provider. Virtual clones (shadows) of devices running on top of these data banks serve as competent proxies of actual IoT devices hiding away device weaknesses. The proposed infrastructure is scalable and robust and serves as a good first step for the community to build on and improve.