SuperMem: Enabling Application-transparent Secure Persistent Memory with Low Overheads
SuperMem: Enabling Application-transparent Secure Persistent Memory with Low Overheads
复制标题
DOI：
10.1145/3352460.3358290
复制
发表时间：
2019-10
期刊：
影响因子：
--
通讯作者：
Pengfei Zuo;Yu Hua;Yuan Xie
中科院分区：
文献类型：
--
作者：
Pengfei Zuo;Yu Hua;Yuan Xie
由于非易失性，非易失性存储器 (NVM) 容易遭受基于物理访问的攻击。为了保证NVM中的数据安全，考虑到其高安全级别和低解密延迟，通常采用计数器模式加密。然而，由于需要原子地持久保存数据及其计数器，计数器模式加密为崩溃一致性保证带来了新的持久性问题。为了解决这个问题，现有的工作需要大量的备用电池，或者由于采用回写计数器缓存而对硬件和软件层进行复杂的修改。大型备用电池价格昂贵，而且软件层修改限制了应用程序从未加密 NVM 到加密 NVM 的可移植性。我们的论文提出了 SuperMem，一种应用程序透明的安全持久存储器，它利用直写式计数器缓存来保证数据和计数器写入的原子性，而不需要大量电池备份和软件层修改。为了降低基线直写式计数器缓存的性能开销，SuperMem 利用局部性感知计数器写入合并方案，通过利用计数器存储和数据写入的空间局部性来减少写入请求的数量。此外，SuperMem 利用跨银行计数器存储方案来有效地将数据和计数器写入分配到不同的银行，从而通过利用银行并行性来加速写入。实验结果表明，与具有基线直写式计数器缓存的加密NVM相比，SuperMem的性能提高了约2倍，并且达到了与理想安全NVM相当的性能，展现了加密NVM的最佳性能。
Non-volatile memory (NVM) suffers from security vulnerability to physical access based attacks due to non-volatility. To ensure data security in NVM, counter mode encryption is often used by considering its high security level and low decryption latency. However, the counter mode encryption incurs new persistence problem for crash consistency guarantee due to the requirement for atomically persisting both data and its counter. To address this problem, existing work requires a large battery backup or complex modifications on both hardware and software layers due to employing a writeback counter cache. The large battery backup is expensive and software-layer modifications limit the portability of applications from the un-encrypted NVM to the encrypted one. Our paper proposes SuperMem, an application-transparent secure persistent memory by leveraging a write-through counter cache to guarantee the atomicity of data and counter writes without the needs of a large battery backup and software-layer modifications. To reduce the performance overhead of a baseline write-through counter cache, SuperMem leverages a locality-aware counter write coalescing scheme to reduce the number of write requests by exploiting the spatial locality of counter storage and data writes. Moreover, SuperMem leverages a cross-bank counter storage scheme to efficiently distribute data and counter writes to different banks, thus speeding up writes by exploiting bank parallelism. Experimental results demonstrate that SuperMem improves the performance by about 2× compared with an encrypted NVM with a baseline write-through counter cache, and achieves the performance comparable to an ideal secure NVM that exhibits the optimal performance of an encrypted NVM.