CNS Core: Small: A Hardware/Software Infrastructure for Secured Multi-Tenancy in FPGA-Accelerated Cloud and Datacenters

CNS 核心：小型：用于 FPGA 加速云和数据中心中安全多租户的硬件/软件基础设施

• 批准号: 2007320
• 负责人: Christophe Bobda
• 金额: $ 48万
• 依托单位: University of Florida
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2020
• 资助国家: 美国
• 起止时间: 2020-10-01 至 2024-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2007320&HistoricalAwards=false
• 关键词: CNS; Core; Small; Hardware; Software

With increasing world-wide use of cloud-based computing resources it is more than ever necessary to have efficient, reliable, secured, and power-efficient datacenters. In order to cope with the versatile demand in social media, content streaming, banking, shopping, and high-performance computation, data centers must accommodate heterogeneous architectures to cope with the versatility in computing. FPGA devices have been recently introduced in cloud infrastructure to provide acceleration for critical applications in artificial intelligence, imaging, high-performance, and cryptography, with reduced power consumption. Unfortunately, current cloud providers are still assigning entire FPGAs to single customers, which leads to underutilization and increases in power consumption and costs. The primary reason is the lack of secured and stable approaches to enable the sharing of FPGA-resources among multiple cloud tenants, many of whom could be malicious.This project aims at addressing the problem of multi-tenancy in FPGA-accelerated clouds and datacenters by providing the architecture and mechanisms for the efficient sharing of FPGA devices among multiple users. Specifically, the investigators will design and implement 1) hardware and software virtualization technologies for the integration of segments of the same hardware into cloud hypervisors, 2) isolation framework based on the NSA-developed Flux Advanced Security Kernel (FLASK) to extend domain separation from software threads and virtual machines down to provisioned hardware accelerators, and 3) temporal and spatial management approaches of the hardware resources, from the admission control to the execution on the FPGA device. The resulting cloud management framework will be made available to schools, colleges, communities and commercial entities to facilitate the adoption of heterogeneous cloud infrastructure that incorporates FPGAs. While the 20-node FPGA-accelerated cloud installed at the University of Florida will be used as testbed throughout the project, it will also serve as a vehicle to develop new classes and provide training to students, both on and off-campus. In this regard, the investigators will increase efforts to recruit and engage under-represented groups using existing resources such as the George Washington Carver Research program and the Florida-Caribbean Louis Stokes Regional Center of Excellence.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

随着全球范围内基于云计算资源的使用日益增加，拥有高效、可靠、安全和节能的数据中心比以往任何时候都更加必要。为了应对社交媒体、内容流、银行、购物和高性能计算中的多功能性需求，数据中心必须适应异构架构，以应对计算的多功能性。FPGA器件最近被引入云基础设施，为人工智能、成像、高性能和密码学等关键应用提供加速，同时降低功耗。不幸的是，目前的云提供商仍然将整个fpga分配给单个客户，这导致了利用率不足，并增加了功耗和成本。主要原因是缺乏安全和稳定的方法来实现多个云租户之间的fpga资源共享，其中许多租户可能是恶意的。该项目旨在通过提供FPGA设备在多个用户之间有效共享的架构和机制，解决FPGA加速云和数据中心中的多租户问题。具体而言，研究人员将设计和实施1)硬件和软件虚拟化技术，将相同硬件的部分集成到云管理程序中；2)基于nsa开发的Flux高级安全内核（FLASK）的隔离框架，将从软件线程和虚拟机的域分离扩展到预置的硬件加速器；3)硬件资源的时空管理方法。从准入控制到FPGA器件上的执行。由此产生的云管理框架将提供给学校、学院、社区和商业实体，以促进采用集成fpga的异构云基础设施。安装在佛罗里达大学的20节点fpga加速云将作为整个项目的测试平台，它也将作为开发新课程的工具，并为校园内外的学生提供培训。在这方面，调查人员将加大努力，利用现有资源，如乔治·华盛顿·卡弗研究项目和佛罗里达-加勒比路易斯·斯托克斯卓越区域中心，招募和参与代表性不足的群体。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

Architecture Support for FPGA Multi-tenancy in the Cloud

• DOI: 10.1109/asap49362.2020.00030
• 发表时间: 2020-06
• 期刊: 2020 IEEE 31st International Conference on Application-specific Systems, Architectures and Processors (ASAP)
• 作者: Joel Mandebi Mbongue;Alex Shuping;Pankaj Bhowmik;C. Bobda

Domain Isolation in FPGA-Accelerated Cloud and Data Center Applications

FPGA 加速云和数据中心应用中的域隔离

• DOI: 10.1145/3453688.3461527
• 发表时间: 2021
• 期刊: Proceedings of the 2021 on Great Lakes Symposium on VLSI. 2021
• 作者: Mandebi Mbongue, Joel;Saha, Sujan Kumar;Bobda, Christophe
• 通讯作者: Bobda, Christophe

Exploring a Layer-based Pre-implemented Flow for Mapping CNN on FPGA

• DOI: 10.1109/ipdpsw52791.2021.00025
• 发表时间: 2021-06
• 期刊: 2021 IEEE International Parallel and Distributed Processing Symposium Workshops (IPDPSW)
• 作者: Danielle Tchuinkou Kwadjo;Joel Mandebi Mbongue;C. Bobda

Accommodating Multi-Tenant FPGAs in the Cloud

在云中容纳多租户 FPGA

• DOI: 10.1109/fccm48280.2020.00045
• 发表时间: 2020
• 期刊: ." 2020 IEEE 28th Annual International Symposium on Field-Programmable Custom Computing Machines (FCCM
• 作者: Mbongue, Joel Mandebi;Bobda, Christophe
• 通讯作者: Bobda, Christophe

Metrics for Assessing Security of System-on-Chip

评估片上系统安全性的指标

• DOI: 10.1109/host54066.2022.9839854
• 发表时间: 2022
• 期刊: 2022 IEEE International Symposium on Hardware Oriented Security and Trust (HOST
• 作者: Saha, Sujan Kumar;Mbongue, Joel Mandebi;Bobda, Christophe
• 通讯作者: Bobda, Christophe