CAREER: Introspective Computing: A Multicore Approach to Availability, Reliability and Security

职业：内省计算：实现可用性、可靠性和安全性的多核方法

• 批准号: 0644096
• 负责人: Hsien-Hsin Lee
• 金额: $ 40万
• 依托单位: Georgia Tech Research Corporation
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2007
• 资助国家: 美国
• 起止时间: 2007-06-01 至 2013-05-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0644096&HistoricalAwards=false
• 关键词: CAREER; Introspective; Computing; Multicore; Approach

Hsien-Hsin S LeeGeorgia Institute of TechnologyCAREER: Introspective Computing: A Multcore Approach to Availability, Reliability, and Security0644096Panel ID: 070111AbstractCyber exploits and remote attacks on network servers are becoming enormous concerns by service providers, online merchants, and network users. Due to the deficiency of effective and efficient countermeasures and self-healing capability, malicious adversaries can easily compromise systems, gain unauthorized access, and disrupt services, leading to huge loss of productivity and revenues. To provide high availability, reliability and security for computing systems is, more urgent than ever, the first-order design criteria. On the other hand, technology scaling has reached a point where processor architects can integrate multiple processor cores onto the same die. Using such multi-core processors with necessary hardware and system software support, an introspective computing platform can be constructed to addresses these emerging issues. An introspective multi-core architecture leverages several advantages offered by the tightly-coupled on-die processor cores to perform: fine-grained security introspection, instant low-overhead checkpoint, and fast, on-demand rollback recovery, thereby providing a continuing service in the face of system compromise or corruption. The key features of an introspective system include programmable asymmetric processor cores, physical insulation against exploits, highly efficient fine-grained introspection, and fast checkpoint/recovery mechanism. In addition, with adequate monitoring and detection mechanism implemented, fault-tolerance and hardware-based transactional memory system can be enabled for minimal cost. Overall, it provides a synergistic and holistic solution toward the challenges of achieving high availability, reliability, and security. The outcome of this research will substantially benefit the IT industry, the generic users for protecting their privacy, and the processor architects to consider these challenges in the early design phase.

Hsien-Hsin S LeeGeorgia Institute of Technology职业生涯：内省计算：可用性、可靠性和安全性的多核方法0644096小组ID：070111摘要网络服务器上的网络漏洞和远程攻击正成为服务提供商、在线商家和网络用户的巨大关注点。 由于缺乏有效和高效的对策和自我修复能力，恶意攻击者可以很容易地危害系统，获得未经授权的访问，并中断服务，导致生产力和收入的巨大损失。 为计算机系统提供高可用性、可靠性和安全性是计算机系统的首要设计准则。 另一方面，技术扩展已经达到了处理器架构师可以将多个处理器内核集成到同一个芯片上的程度。 使用这样的多核处理器与必要的硬件和系统软件支持，一个内省的计算平台可以构建来解决这些新兴的问题。内省多核架构利用紧密耦合的管芯上处理器核提供的若干优点来执行：细粒度安全内省、即时低开销检查点以及快速按需回滚恢复，从而在面对系统妥协或损坏时提供持续服务。 内省系统的关键特征包括可编程非对称处理器内核、针对漏洞的物理隔离、高效的细粒度内省和快速检查点/恢复机制。 此外，通过实施适当的监视和检测机制，可以以最小的成本启用容错和基于硬件的事务存储器系统。 总的来说，它提供了一个协同和整体的解决方案，以应对实现高可用性、可靠性和安全性的挑战。这项研究的结果将极大地有利于IT行业、普通用户保护其隐私，以及处理器架构师在早期设计阶段考虑这些挑战。