WAS-Deletion: Workload-Aware Secure Deletion Scheme for Solid-State Drives
WAS-Deletion: Workload-Aware Secure Deletion Scheme for Solid-State Drives
复制标题
DOI：
10.1109/iccd53106.2021.00047
复制
发表时间：
2021-10
期刊：
影响因子：
--
通讯作者：
Bingzhe Li;D. Du
中科院分区：
文献类型：
--
作者：
Bingzhe Li;D. Du
由于固态硬盘（SSD）的固有属性，无效数据在被垃圾收集过程擦除之前保留在SSD中，这增加了被对手攻击的风险。以前的研究使用擦除和基于密码学的方案来故意删除目标数据，但面临非常大的开销。在本文中，我们提出了一个工作负载感知的安全删除方案，称为WAS删除，以减少安全删除的三个主要组成部分的开销。首先，WAS-Deletion方案根据工作负载特征有效地将无效和有效数据划分到不同的块中。其次，WAS-Deletion方案使用了一种新的加密分配方案，使加密遵循与多个块上的写入相同的方向，并在一个块中使用相同的密钥垂直加密页面。最后，提出了一种新的自适应调度方案，可以根据当前的工作负载动态地改变不同区域的配置，以进一步降低安全删除开销。实验结果表明，新提出的WAS-Deletion方案可以减少安全删除成本约1.2倍至12.9倍，相比以前的研究。
Due to the intrinsic properties of Solid-State Drives (SSDs), invalid data remain in SSDs before erased by a garbage collection process, which increases the risk of being attacked by adversaries. Previous studies use erase and cryptography based schemes to purposely delete target data but face extremely large overhead. In this paper, we propose a Workload-Aware Secure Deletion scheme, called WAS-Deletion, to reduce the overhead of secure deletion by three major components. First, the WAS-Deletion scheme efficiently splits invalid and valid data into different blocks based on workload characteristics. Second, the WAS-Deletion scheme uses a new encryption allocation scheme, making the encryption follow the same direction as the write on multiple blocks and vertically encrypts pages with the same key in one block. Finally, a new adaptive scheduling scheme can dynamically change the configurations of different regions to further reduce secure deletion overhead based on the current workload. The experimental results indicate that the newly proposed WAS-Deletion scheme can reduce the secure deletion cost by about 1.2x to 12.9x compared to previous studies.