FoMR: A Software and Hardware Co-Design for Addressing the Performance Bottlenecks in Secure Non-Volatile Memory

FoMR：用于解决安全非易失性存储器性能瓶颈的软件和硬件协同设计

• 批准号: 2011146
• 负责人: Youtao Zhang
• 金额: $ 33万
• 依托单位: University of Pittsburgh
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2020
• 资助国家: 美国
• 起止时间: 2020-07-15 至 2024-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2011146&HistoricalAwards=false
• 关键词: FoMR; Software; Hardware; Co; Design

Modern computer systems increasingly integrate NVM (non-volatile memory) as part of main memory, e.g., the Intel Optane Persistent Memory module. While such integration effectively addresses the large capacity demands of modern applications, there is an increasing concern on the security of NVM-based computer servers. While Intel SGX (Software Guard eXtensions) achieves high-level security protection, it faces dramatic performance degradation on NVM-based memory systems. This project aims to address the performance issues in SGX-based secure NVM systems without compromising the security requirements. Given the large global footprint of computer servers that rely on Intel SGX to provide security, this project will have an impact by enabling an efficient and secure operating environment for computer programs. This project also enhances undergraduate and graduate education with outreach to under-represented groups.By developing hardware-assisted zero-copy page remapping and parallel remapping techniques, it enables secure and low-cost dynamic remapping of insecure pages to SGX memory. By developing compiler-assisted user-controlled paging, it reduces the page reuse distances such that the total number of page remaps between the SGX memory and the untrusted memory can be significantly reduced. By developing cache contents based Merkle tree techniques for secure NVM, it enables the adoption of write-back replacement policy for metadata caches and thus effectively reduces the number of NVM writes. This project enables the delivery of simple yet effective software and hardware components that dramatically enhance performance in secure NVM.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

现代计算机系统越来越多地将NVM（非易失性存储器）集成为主存储器的一部分，例如，Intel Optane Persistent Memory模块虽然这种集成有效地解决了现代应用程序的大容量需求，但人们越来越关注基于NVM的计算机服务器的安全性。虽然英特尔SGX（Software Guard eXtensions）实现了高级别的安全保护，但它在基于NVM的内存系统上面临着显著的性能下降。该项目旨在解决基于SGX的安全NVM系统的性能问题，而不影响安全要求。鉴于依赖英特尔SGX提供安全性的计算机服务器遍布全球，该项目将通过为计算机程序提供高效安全的操作环境而产生影响。通过开发硬件辅助的零拷贝页面重映射和并行重映射技术，该项目实现了将不安全页面安全、低成本地动态重映射到SGX内存。通过开发编译器辅助的用户控制的分页，它减少了页面重用距离，从而可以显着减少SGX存储器和不可信存储器之间的页面重映射的总数。通过开发基于缓存内容的Merkle树安全NVM技术，它使元数据缓存的回写替换策略的采用，从而有效地减少了NVM写的数量。该项目能够提供简单而有效的软件和硬件组件，大大提高安全NVM的性能。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

ModelShield: A Generic and Portable Framework Extension for Defending Bit-Flip based Adversarial Weight Attacks

• DOI: 10.1109/iccd53106.2021.00090
• 发表时间: 2021-10
• 期刊: 2021 IEEE 39th International Conference on Computer Design (ICCD)
• 作者: Yanan Guo;Liang Liu;Yueqiang Cheng;Youtao Zhang;Jun Yang

Eavesdropping user credentials via GPU side channels on smartphones

• DOI: 10.1145/3503222.3507757
• 发表时间: 2022-02
• 期刊: Proceedings of the 27th ACM International Conference on Architectural Support for Programming Languages and Operating Systems
• 作者: Boyuan Yang;Ruirong Chen;Kai Huang;Jun Yang;Wei Gao

ScaleDNN: Data Movement Aware DNN Training on Multi-GPU

ScaleDNN：多 GPU 上的数据移动感知 DNN 训练

• DOI: 10.1109/iccad51958.2021.9643503
• 发表时间: 2021
• 期刊: 2021 IEEE/ACM International Conference On Computer Aided Design (ICCAD
• 作者: Xu, Weizheng;Pattnaik, Ashutosh;Yuan, Geng;Wang, Yanzhi;Zhang, Youtao;Tang, Xulong
• 通讯作者: Tang, Xulong

Adversarial Prefetch: New Cross-Core Cache Side Channel Attacks

• DOI: 10.1109/sp46214.2022.9833692
• 发表时间: 2021-10
• 期刊: 2022 IEEE Symposium on Security and Privacy (SP)
• 作者: Yanan Guo;Andrew Zigerelli;Youtao Zhang;Jun Yang

CacheTree: Reducing Integrity Verification Overhead of Secure Nonvolatile Memories

CacheTree：减少安全非易失性存储器的完整性验证开销

• DOI: 10.1109/tcad.2020.3015925
• 发表时间: 2021-07-01
• 期刊: IEEE TRANSACTIONS ON COMPUTER-AIDED DESIGN OF INTEGRATED CIRCUITS AND SYSTEMS
• 影响因子: 2.9
• 作者: Chen, Zhengguo;Zhang, Youtao;Xiao, Nong
• 通讯作者: Xiao, Nong