Osiris: A Low-Cost Mechanism to Enable Restoration of Secure Non-Volatile Memories

Ye, Mao; Hughes, Clayton; Awad, Amro

doi:10.1109/micro.2018.00040

Cited by 60 publications

(66 citation statements)

References 27 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Secure memory implementation has been studied from different perspectives by variety of studies. Osiris [30] discussed the crash consistency problem of secure NVMs, and highlighted that a power failure or a crash can result in having stale encryption counters, which can lead to integrity verification failure, and thus losing the whole memory content. Osiris proposed a scheme to recover the encryption counters after a crash, which relies on a stop-loss mechanism coupled with using ECC bits as a sanity check for the recovered counter correctness.…”

Section: Related Workmentioning

confidence: 99%

“…In this work, we assume a similar threat mode as in state-of-the-art work in secure memory architecture [5,7,8,22,27,28,30,31,33]. The trust base is limited to the processor and its internal structures.…”

Section: Threat Modelmentioning

confidence: 99%

“…Emerging Non-Volatile Memories (NVMs) are expected to replace the DRAM as main memories [5,7,[27][28][29][30][31]33]. Emerging NVMs combine the features of main memory and storage, as they feature byte addressability, access latencies comparable to DRAM, near-zero idle power consumption, high density, and the ability to retain data during power failure episodes.…”

Section: Emerging Non-volatile Memories (Nvms)mentioning

confidence: 99%

“…Each memory pool implements its own media controller that translates Gen-Z commands into media-specific read and write operations. Processing elements must use the Gen-Z coupled with security features i.e, encryption and integrity verification [5,7,8,30,31,33,34]. While the secure memory implementations are not limited to NVMs due to similar data remanance attacks performed in DRAM i.e., cold boot attack [32], our work is not limited to NVMs as well.…”

Section: Introductionmentioning

confidence: 99%

“…Typically, security metadata caches are used to reduce the required memory accesses for encryption/decryption and integrity verification [19]. Previous work in secure memory architecture [7,[28][29][30][31]33] considered a system that has a single memory pool protected by a single Merkle-Tree. However, each node in the FAM architecture has an access to a private local memory, and a global shared memory.…”

Section: Introductionmentioning

confidence: 99%

See 4 more Smart Citations

Caching Techniques for Security Metadata in Integrity-Protected Fabric-Attached Memories

Alwadi¹,

Awad²

2018

ICST Transactions on Security and Safety

Self Cite

View full text Add to dashboard Cite

The constant need for larger memories and the diversity of workloads have drove the system vendors away from the conventional processor-centric architecture into a memory-centric architecture. Memorycentric architecture, allows multiple computing nodes to connect to a huge shared memory pool and access it directly. To improve the performance, each node uses a small local memory to cache the data. These architectures introduce several problems when memory encryption and integrity verification are implemented. For instance, using a single integrity tree to protect both memories can introduce unnecessary overheads. Therefore, we propose Split-Tree, which implements a separate integrity tree for each memory. Later, we analyze the system performance, and the security metadata caches behavior when separate trees are used. We use the gathered insights to improve the security metadata caching for the separate trees and ultimately improve the system performance.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Threat Modelmentioning

confidence: 99%

Section: Emerging Non-volatile Memories (Nvms)mentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

Caching Techniques for Security Metadata in Integrity-Protected Fabric-Attached Memories

Alwadi¹,

Awad²

2018

ICST Transactions on Security and Safety

Self Cite

View full text Add to dashboard Cite

show abstract

Innovations in the Memory System

Balasubramonian

2019

Synthesis Lectures on Computer Architecture

View full text Add to dashboard Cite

Pribadi: A decentralized privacy-preserving authentication in wireless multimedia sensor networks for smart cities

Goyat,

Kumar,

Saha

et al. 2023

Cluster Comput

View full text Add to dashboard Cite

Wireless Multimedia Sensor Network (WMSN) is a network of interconnected sensor nodes equipped with multimedia devices capable to retrieve multimedia as well as scalar sensor data in smart city scenarios. With the progress of smart city development, WMSNs are becoming points of interest. The existing research works on the security of WMSNs show some significant centralized solutions; they are prone to denial of service attacks, central failure, and privacy breaches. Also, these solution are having limitations because of their centralized nature.Therefore, the the proposed scheme adopted the concept of decentralization to achieve more effective and ubiquitous results. As per our best knowledge, we introduce the first decentralized privacy-preserving authentication framework for WMSNs to address the energy and storage challenges. We call our solution PRIvacy-preserving Blockchain-based Authentication for multimeDIa networks (PRIBADI). PRIBADI uses a blockchain framework for authenticated communication between sensor nodes and base stations (as a trusted authority) by using certification and access authentication schemes. We elect trustworthy cluster heads based on weight metrics and these cluster heads forward the information to the Trusted Authority (TA). Subsequently, TA forward large data to the cloud for storage, and the information relevant to certificates and hashes are recorded on the distributed blockchain. Moreover, TA revokes the certificates of malicious sensor nodes and eliminates them from the blockchain. We run a set of experiments on PRIBADI and compare the results with the state-of-the-art models. We use the evaluation criteria of detection accuracy, operation, and energy consumption. We find that PRIBADI is 31.7% better than the existing models.

show abstract

Osiris: A Low-Cost Mechanism to Enable Restoration of Secure Non-Volatile Memories

Cited by 60 publications

References 27 publications

Caching Techniques for Security Metadata in Integrity-Protected Fabric-Attached Memories

Caching Techniques for Security Metadata in Integrity-Protected Fabric-Attached Memories

Innovations in the Memory System

Pribadi: A decentralized privacy-preserving authentication in wireless multimedia sensor networks for smart cities

Contact Info

Product

Resources

About