FoMR: A Software and Hardware Co-Design for Addressing the Performance Bottlenecks in Secure Non-Volatile Memory

FoMR：用于解决安全非易失性存储器性能瓶颈的软件和硬件协同设计

• 批准号: 2011146
• 负责人: Youtao Zhang
• 金额: $ 33万
• 依托单位: University of Pittsburgh
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2020
• 资助国家: 美国
• 起止时间: 2020-07-15 至 2024-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2011146&HistoricalAwards=false
• 关键词: FoMR; Software; Hardware; Co; Design

Modern computer systems increasingly integrate NVM (non-volatile memory) as part of main memory, e.g., the Intel Optane Persistent Memory module. While such integration effectively addresses the large capacity demands of modern applications, there is an increasing concern on the security of NVM-based computer servers. While Intel SGX (Software Guard eXtensions) achieves high-level security protection, it faces dramatic performance degradation on NVM-based memory systems. This project aims to address the performance issues in SGX-based secure NVM systems without compromising the security requirements. Given the large global footprint of computer servers that rely on Intel SGX to provide security, this project will have an impact by enabling an efficient and secure operating environment for computer programs. This project also enhances undergraduate and graduate education with outreach to under-represented groups.By developing hardware-assisted zero-copy page remapping and parallel remapping techniques, it enables secure and low-cost dynamic remapping of insecure pages to SGX memory. By developing compiler-assisted user-controlled paging, it reduces the page reuse distances such that the total number of page remaps between the SGX memory and the untrusted memory can be significantly reduced. By developing cache contents based Merkle tree techniques for secure NVM, it enables the adoption of write-back replacement policy for metadata caches and thus effectively reduces the number of NVM writes. This project enables the delivery of simple yet effective software and hardware components that dramatically enhance performance in secure NVM.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

现代计算机系统越来越多地集成 NVM（非易失性内存）作为主内存的一部分，例如英特尔傲腾持久内存模块。虽然这种集成有效地满足了现代应用程序的大容量需求，但人们越来越关注基于 NVM 的计算机服务器的安全性。虽然英特尔 SGX（Software Guard eXtensions）实现了高级别的安全保护，但它在基于 NVM 的内存系统上面临着性能急剧下降的问题。该项目旨在解决基于 SGX 的安全 NVM 系统的性能问题，同时不影响安全要求。鉴于依赖英特尔 SGX 提供安全性的计算机服务器在全球范围内占有很大的份额，该项目将通过为计算机程序提供高效、安全的操作环境来产生影响。该项目还通过开发硬件辅助的零拷贝页面重新映射和并行重新映射技术，增强本科生和研究生教育，并扩展到代表性不足的群体。它可以将不安全页面安全且低成本地动态重新映射到 SGX 内存。通过开发编译器辅助的用户控制分页，减少了页面重用距离，从而可以显着减少SGX内存和不可信内存之间的页面重新映射总数。通过开发基于缓存内容的安全NVM Merkle树技术，可以采用元数据缓存的回写替换策略，从而有效减少NVM写入次数。该项目能够提供简单而有效的软件和硬件组件，从而显着提高安全 NVM 的性能。该奖项反映了 NSF 的法定使命，并通过使用基金会的智力优点和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

Reprogramming 3D TLC Flash Memory based Solid State Drives

对基于 3D TLC 闪存的固态硬盘进行重新编程

• DOI: 10.1145/3487064
• 发表时间: 2022-02
• 期刊: ACM Transactions on Storage
• 影响因子: 1.7
• 作者: Gao, Congming;Ye, Min;Xue, Chun Jason;Zhang, Youtao;Shi, Liang;Shu, Jiwu;Yang, Jun
• 通讯作者: Yang, Jun

Eavesdropping user credentials via GPU side channels on smartphones

通过智能手机上的 GPU 侧通道窃听用户凭据

• DOI: 10.1145/3503222.3507757
• 发表时间: 2022-02
• 期刊: the 27th ACM International Conference on Architectural Support for Programming Languages and Operating Systems
• 作者: Yang, Boyuan;Chen, Ruirong;Huang, Kai;Yang, Jun;Gao, Wei
• 通讯作者: Gao, Wei

Leveraging partial-refresh for performance and lifetime improvement of 3D NAND flash memory in cyber-physical systems

利用部分刷新来提高网络物理系统中 3D NAND 闪存的性能和寿命

• DOI: 10.1016/j.sysarc.2019.101685
• 发表时间: 2020-02
• 期刊: Journal of Systems Architecture
• 影响因子: 4.5
• 作者: Cui, Jinhua;Zhang, Youtao;Shi, Liang;Xue, Chun Jason;Yang, Jun;Liu, Weiguang;Yang, Laurence T.
• 通讯作者: Yang, Laurence T.

Improving Address Translation in Multi-GPUs via Sharing and Spilling aware TLB Design

通过共享和溢出感知 TLB 设计改进多 GPU 中的地址转换

• DOI: 10.1145/3466752.3480083
• 发表时间: 2021-10
• 期刊: 54th Annual IEEE/ACM International Symposium on Microarchitecture
• 作者: Li, Bingyao;Yin, Jieming;Zhang, Youtao;Tang, Xulong
• 通讯作者: Tang, Xulong

Performance-Enhanced Integrity Verification for Large Memories

针对大内存的性能增强型完整性验证

• DOI: 10.1109/seed51797.2021.00016
• 发表时间: 2021-09
• 期刊: 2021 International Symposium on Secure and Private Execution Environment Design (SEED
• 作者: Guo, Yanan;Zigerelli, Andrew;Cheng, Yueqiang;Zhang, Youtao;Yang, Jun
• 通讯作者: Yang, Jun