SGX-SSD: A Policy-based Versioning SSD with Intel SGX
Talkat 12th USENIX Workshop on Hot Topics in Storage and File Systems (HotStorage '20) · 2020-07-13..07-14·
summary
Implements a policy-driven versioning SSD that moves backup logic into firmware and protects metadata and requests with an Intel SGX enclave, so policy changes cannot be tampered with by a compromised OS. Policies are applied per file (retention days, max versions, circular cycle) to keep only important history and reduce space. It cites Project Armada limits of 3–56 days versus >50% malware dwell ≥60 days, and demonstrates selective preservation of files after late detection.
AI-written summary · about
chapters (6)
- 0:00Start
- 0:26Motivation: Malware's Data Tampering Attack
- 1:14Motivation: Integrity vulnerability of Versioning SSD
- 3:20Motivation: Keeping deeper history for important files
- 4:47Design Challenge: SGX-SSD
- 5:29Summary
related talks
46mState of Intel SGX in Linux
32mSecure Container with SGX: Protecting Secret in Cloud Environment
17mAtomicDisk: A Secure Virtual Disk for TEEs against Eviction Attacks
21mSPEICHER: Securing LSM-based Key-Value Stores using Shielded Execution
54mWhen Good Turns Evil: Using Intel SGX to Stealthily Steal Bitcoins
17mShieldReduce: Fine-Grained Shielded Data Reduction
35mBringing Intel SGX to the Rust Ecosystem
15mAccelerating Encrypted Deduplication via SGX