Ariadne: A Minimal Approach to State Continuity
summary
Ariadne addresses state-continuity for protected-module architectures like Intel SGX by providing rollback protection, input-atomicity (either continue on an accepted input or fail-stop), and a liveness guarantee after power loss. The approach achieves a theoretical minimum of one non-volatile memory bit flip per state update and is adaptable to resource-constrained devices as well as SGX platforms to protect stateful modules (e.g., those used by Haven and VC^3).
AI-written summary · about
chapters (12)
- 0:00State continuity with Ariadne
- 1:09DNS problems in legacy systems
- 3:16System updates entrypoint
- 6:03Modifying system divisions
- 8:37Recovery and fault tolerance
- 10:11Input systems readiness
- 12:26Counter recovery package management
- 14:08Restarting systems
- 16:12Update problems and stability
- 18:03Resetting systems
- 20:12Management engine architecture
- 21:30Q&A
related talks
21mSecuring Tomorrow’s Hardware: Dual-State Models in the AI Era
19mRethinking Isolation Mechanisms for Datacenter Multitenancy
35mROTE: Rollback Protection for Trusted Execution
40mPrinciples For Secure & Reliable Systems
46mRethinking Architectures and Abstraction for a World Where Security Improvements Matter More than Performance Gains
16mMitigating Transient-Execution Attacks with CHERI Compartments
14mNimble: Rollback Protection for Confidential Cloud Services
21mDefending Against Transient Execution Attacks: Security Enhancements in XuanTie Microarchi...