Horus: Persistent Security for Extended Persistence-Domain Memory Systems
Horus: Persistent Security for Extended Persistence-Domain Memory Systems
复制标题
DOI：
10.1109/micro56248.2022.00087
复制
发表时间：
2022-10
期刊：
影响因子：
--
通讯作者：
Xijing Han;James Tuck;Amro Awad
中科院分区：
文献类型：
--
作者：
Xijing Han;James Tuck;Amro Awad
永久存储器为大规模计算系统中的崩溃一致性计算提供了一个很好的机会。在停电或崩溃事件时恢复数据的能力可以显著提高大型系统的可用性，同时提高持久性数据应用程序(例如数据库应用程序)的性能。然而，持久性内存存在写入延迟高的问题，需要特定的编程模型(例如Intel的PMDK)来保证崩溃一致性，这会导致数据持久化的延迟很长。为了缓解这些问题，最近的标准提倡足够的备份能力，其可以在检测到中断时将整个高速缓存层次结构刷新到永久存储器，即，扩展持久域以包括高速缓存层次结构。在具有扩展持久域(EPD)的安全NVM中，除了刷新缓存层次结构之外，还需要采取额外的操作来保护刷新的缓存数据。这些额外的安全操作可能会对能源成本和电池大小造成重大负担。我们证明，朴素的实施可以显著地扩展所需的功率保持预算(例如，比没有安全存储器支持的EPD系统多10.3倍的操作)。显著的开销是由安全元数据的存储器访问引起的。在本文中，我们提出了一种新的EPD感知的安全存储实现Horus。Horus通过减少对安全元数据的内存访问，减少了EPD系统在排出期间的开销。实验结果表明，与朴素的基线设计相比，Horus的引流时间减少了5倍。
Persistent memory presents a great opportunity for crash-consistent computing in large-scale computing systems. The ability to recover data upon power outage or crash events can significantly improve the availability of large-scale systems, while improving the performance of persistent data applications (e.g., database applications). However, persistent memory suffers from high write latency and requires specific programming model (e.g., Intel’s PMDK) to guarantee crash consistency, which results in long latency to persist data. To mitigate these problems, recent standards advocate for sufficient back-up power that can flush the whole cache hierarchy to the persistent memory upon detection of an outage, i.e., extending the persistence domain to include the cache hierarchy. In the secure NVM with extended persistent domain(EPD), in addition to flushing the cache hierarchy, extra actions need to be taken to protect the flushed cache data. These extra actions of secure operation could cause significant burden on energy costs and battery size. We demonstrate that naive implementations could lead to significantly expanding the required power holdup budget (e.g., 10.3x more operations than EPD system without secure memory support). The significant overhead is caused by memory accesses of secure metadata. In this paper, we present Horus, a novel EPD-aware secure memory implementation. Horus reduces the overhead during draining period of EPD system by reducing memory accesses of secure metadata. Experiment result shows that Horus reduces the draining time by 5x, compared with the naive baseline design.