CNS Core: Small: Towards Secure-By-Design Integration of Emerging Non-Volatile Memory in Future Systems

计算机系统越来越多地采用非易失性存储器（nvm），它提供高容量，卓越的功率效率和持久的存储。传统上，人们在解决NVM的非易失性安全问题上付出了巨大的努力。然而，基于硬件的信息泄漏攻击的出现需要系统地重新评估NVM内存架构。该项目调查了以不同方式集成nvm的计算系统中侧面和隐蔽通道形式的信息安全威胁。将执行从设备级访问到系统级管理策略的安全属性的全面检查。基于对潜在攻击向量的全面了解，该项目将设计有效的架构和系统级防御技术，以击败利用基于nvm的系统中发现的信息泄漏漏洞的未来对手。为此，本项目旨在从以下几个方面加强集成了NVM的系统的信息安全：(1)保护NVM作为主存；(2)保护DRAM/NVM混合存储系统；(3)将nvm作为快速存储设备进行保护。由于传统内存技术面临严重的可扩展性问题，nvm在数据中心和高性能计算基础设施等服务器系统的整个存储堆栈中扮演着越来越重要的角色。鉴于基于硬件的安全漏洞的进展，理解和控制由于新兴的支持nvm的系统的架构/系统设计而导致的信息泄漏对于未来的大规模采用是必不可少的。本项目系统评估新兴NVM内存和存储系统的信息泄露威胁。如果成功，该项目将使nvm在计算系统中的安全集成能够抵抗信息泄漏攻击。这项工作将导致向计算机体系结构和安全社区传播工具、攻击库、软件和模拟结果。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

Computer systems are increasingly adopting Non-Volatile Memories (NVMs) that offer high capacity, superior power efficiency and persistent storage. Traditionally, tremendous effort has been made to address NVM security issues concerning the non-volatility property. However, the advent of hardware-based information leakage attacks necessities a systematic re-assessment of NVM memory architectures. This project is investigating the information security threats in the form of side and covert channels in computing systems where NVMs are integrated in different ways. A holistic examination of the security properties from device-level accesses to system-level management policies will be performed. Based on a comprehensive understanding of the potential attack vectors, this project will design efficient architecture and system level defensive techniques to defeat futuristic adversaries exploiting the discovered information leakage vulnerabilities in NVM-based systems. Towards this end, this project aims to bolster information security for systems with NVM integration from the following aspects: (1) Securing NVM as main memory; (2) Securing DRAM/NVM Hybrid Memory System; (3) Securing NVMs as Fast Storage Devices.As traditional memory technology faces severe scalability issues, NVMs are increasingly playing key roles in the whole storage stack of server systems such as data centers and high-performance computing infrastructures. In light of the advances in hardware-based security breaches, understanding and taming information leakage due to the architecture/system design for emerging NVM-enabled systems are imperative for the future large-scale adoption. This project is systematically evaluating information leakage threats in emerging NVM memory and storage systems. If successful, the project will enable secure integration of NVMs in computing systems that are resistant to information leakage attacks. The work will result in the dissemination of tools, attack libraries, software, and simulation results to the computer architecture and security community.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.