CacheTree: Reducing Integrity Verification Overhead of Secure Nonvolatile Memories
CacheTree: Reducing Integrity Verification Overhead of Secure Nonvolatile Memories
复制标题
CacheTree：减少安全非易失性存储器的完整性验证开销
DOI：
10.1109/tcad.2020.3015925
复制
发表时间：
2021-07-01
影响因子：
2.9
通讯作者：
Xiao, Nong
中科院分区：
文献类型：
--
作者：
Chen, Zhengguo;Zhang, Youtao;Xiao, Nong
新兴的非易失性记忆（NVM）虽然表现出巨大的急诊替代潜力，但却容易受到安全攻击的影响。安全的NVM设计需求数据持久性在传统的机密性和完整性保护之上。对现有安全内存设计的简单改编将导致不可忽略的开销，包括性能退化，NVM寿命减少和能源消耗增加。在本文中，我们建议Cachetree解决安全NVM的完整性验证开销。通过在元数据缓存顶部构建额外的默克尔树（MTS），Cachetree有助于身份验证挥发性的缓存内容，从而可以采用写下背包策略并防止持续存在的NVM在持久的元数据中写入。然后，我们采用Cachetree来解决安全NVM中的完整性验证，特别是在持续存在消息身份验证代码（用于保护在内存线级别上的用户数据的完整性）中的间接费用并持续使用主MT（用于保护整个内存的完整性空间）。我们的实验结果表明，Cachetree的存储空间少于0.5％，可提高20.1％的绩效，终生增加44.3％，而最先进的解决方案的能源消耗减少了43.7％。
Emerging nonvolatile memories (NVMs), while exhibiting great potential to be DRAM alternatives, are vulnerable to security attacks. Secure NVM designs demand data persistence on top of traditional confidentiality and integrity protection. A simple adaption of existing secure memory designs would incur non-negligible overheads, including performance degradation, NVM lifetime reduction, and energy consumption increase. In this article, we propose CacheTree to address the integrity verification overhead for secure NVMs. By constructing extra Merkle trees (MTs) on top of metadata cache, CacheTree helps to authenticate the volatile cache contents, which enables the adoption of write-back policy and prevents frequent NVM writes in persisting metadata. We then adopt CacheTree to address the integrity verification in secure NVM, in particular, the overheads in persisting message authentication codes (for protecting the integrity of user data at memory line level) and persisting the main MT (for protecting the integrity of the whole memory space). Our experimental results show that CacheTree, with less than 0.5% storage overhead, achieves up to 20.1% performance improvement, 44.3% lifetime increase, and 43.7% energy consumption reduction over the state-of-the-art solutions.