S2Net: Preserving Privacy in Smart Home Routers
S2Net: Preserving Privacy in Smart Home Routers
复制标题
S2Net：保护智能家居路由器的隐私
DOI：
--
复制
发表时间：
2021
影响因子：
7.3
通讯作者：
Yong Cui
中科院分区：
文献类型：
--
作者：
Seung;Hang Shi;Kun Tan;Yunxin Liu;Sukyoung Lee;Yong Cui
目前，无线家庭路由器正变得越来越智能。虽然这些智能路由器为用户提供了丰富的功能，但它们也引发了安全问题。虽然现有的端到端加密技术可以应用于保护个人数据，但由于加密的有效载荷，这些丰富的功能变得不可用。另一方面，如果允许智能家居路由器处理和存储用户的个人数据，一旦泄露，用户的敏感数据就会暴露。因此，用户面临着丰富功能的好处和潜在的隐私风险之间的艰难权衡。为了解决这个问题，我们提出了一个新的系统命名为安全和智能网络（S2Net）的家庭路由器。对于S2Net，我们提出了一个安全的操作系统，可以区分和管理属于不同用户的多个会话。安全操作系统和所有路由器应用程序都使用ARM TrustZone技术置于安全世界中。在S2Net中，我们还将路由器应用程序限制在建议的安全操作系统提供的沙箱中，以防止数据泄漏。因此，S2Net可以为用户提供丰富的功能，同时为家庭路由器提供强大的隐私保护。此外，我们开发了一个加密工人模型，提供了一个抽象层的加密任务执行的异构多核系统。密码工作者的另一个重要作用是并行计算，以解决密码函数的高计算成本。我们报告的S2Net的系统设计和我们的实现细节。基准测试和真实的应用程序的实验结果表明，我们的实现是能够实现高性能的吞吐量，同时减轻开销的S2Net设计。
At present, wireless home routers are becoming increasingly smart. While these smart routers provide rich functionalities to users, they also raise security concerns. Although the existing end-to-end encryption techniques can be applied to protect personal data, such rich functionalities become unavailable due to the encrypted payloads. On the other hand, if the smart home routers are allowed to process and store the personal data of users, once compromised, the users’ sensitive data will be exposed. As a consequence, users face a difficult trade-off between the benefits of the rich functionalities and potential privacy risks. To deal with this dilemma, we propose a novel system named Secure and Smart Network (S2Net) for home routers. For S2Net, we propose a secure OS that can distinguish and manage multiple sessions belonging to different users. The secure OS and all the router applications are placed in the secure world using the ARM TrustZone technology. In S2Net, we also confine the router applications in sandboxes provided by the proposed secure OS to prevent data leakage. As a result, S2Net can provide rich functionalities for users while preserving strong privacy for home routers. In addition, we develop a crypto-worker model that provides an abstraction layer of cryptographic tasks performed by a heterogeneous multi-core system. The other important role of crypto-worker is to parallelize the computations in order to resolve the high computation cost of cryptographic functions. We report the system design of S2Net and the details of our implementation. Experimental results with benchmarks and real applications demonstrate that our implementation is capable of achieving high performance in terms of throughput while mitigating the overhead of S2Net design.