.png){kind=icon}
返回
S-Blocks: Lightweight and Trusted Virtual Security Function With SGX
.png){kind=icon}
OA
AI
DOI：10.1109/TCC.2020.2985045.png)
.png){kind=icon}
.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Despite the advantages of scalability and flexibility, Security Function Virtualization (SFV) raises concerns about its own security. To enhance the security of SFV, a promising approach is to run critical components of off-the-shelf security software inside Software Guard Extensions (SGX) enclaves. This idea, however, is hardly practical due to the difficulty of detaching components from the monolithic security function and the unacceptable cost of executing them inside enclaves. In this article, we propose S-Blocks, an architecture to modularize virtual security functions (VSFs) and protect crucial modules with SGX in an efficient manner. S-Blocks decomposes VSFs into trusted and untrusted modules and provides dedicated APIs systematically. Only crucial VSF modules are hardened with enclaves. Furthermore, aiming at addressing state consistency and secure migration issues of security function scaling, we design a fine-grained state synchronization and migration mechanism to ensure loss-free, order-preserving, and state security for VSFs. To demonstrate the effectiveness of our approach, we prototype S-Blocks using Fast-Click on a real Skylake platform and implement three critical types of virtual security functions based on the S-Blocks architecture. Our evaluation results show that S-Blocks only imposes a manageable performance overhead, and low latency and resource consumption when protecting VSFs.
Keyword:
Security virtual function
virtual security function
software guard extensions
intrusion detection system
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
I
IF:
5
论文数:
1.8K
被引数:
4.3K
机构
引用论文
Long-term effects of endoscopic papillary large balloon dilation in patients with challenging bile duct calculi.png)
Medicine
OAAI
MedicineIF0
OAAI分享收藏Use of supramolecular cavities maintained by hydrogen-bonded network in molecular crystals as a novel binding site for guests in water. The solid-state host-guest complexation of a bistesorcinol derivative of anthraceneTetrahedron
TetrahedronIF0
PREAI
分享收藏
查看更多内容