Flexible hardware-managed isolated execution: Architecture, software support and applications
المؤلف | Evtyushkin D. |
المؤلف | Elwell J. |
المؤلف | Ozsoy M. |
المؤلف | Ponomarev D. |
المؤلف | Ghazaleh N.A. |
المؤلف | Riley R. |
تاريخ الإتاحة | 2019-10-06T09:38:36Z |
تاريخ النشر | 2018 |
اسم المنشور | IEEE Transactions on Dependable and Secure Computing |
المصدر | Scopus |
الرقم المعياري الدولي للكتاب | 1545-5971 |
الملخص | We consider the problem of how to provide an execution environment where the application's secrets are safe even in the presence of malicious system software layers. We propose Iso-X- A flexible, fine-grained hardware-supported framework that provides isolation for security-critical pieces of an application such that they can execute securely even in the presence of untrusted system software. Isolation in Iso-X is achieved by creating and dynamically managing compartments (isolated software modules) to host critical fragments of code and associated data. Iso-X provides fine-grained isolation at the memory-page level, flexible allocation of memory, and a low-complexity, hardware-only trusted computing base. Iso-X requires minimal additional hardware, a small number of new ISA instructions to manage compartments, and minimal changes to the operating system which need not be in the trusted computing base. The run-time performance overhead of Iso-X is negligible and even the overhead of creating and destroying compartments is modest. An FPGA implementation of Iso-X runtime mechanisms shows a negligible impact on the processor cycle time. 2004-2012 IEEE. |
راعي المشروع | This publication was made possible by the support of the NPRP grant 4-1593-1-260 from the Qatar National Research Fund. The statements made herein are solely the responsibility of the authors. |
اللغة | en |
الناشر | Institute of Electrical and Electronics Engineers Inc. |
الموضوع | hardware security isolated execution Security |
النوع | Article |
الصفحات | 437-451 |
رقم العدد | 3 |
رقم المجلد | 15 |
الملفات في هذه التسجيلة
الملفات | الحجم | الصيغة | العرض |
---|---|---|---|
لا توجد ملفات لها صلة بهذه التسجيلة. |
هذه التسجيلة تظهر في المجموعات التالية
-
علوم وهندسة الحاسب [2288 items ]