论文标题
MEMSHIELD:GPU辅助软件内存加密
MemShield: GPU-assisted software memory encryption
论文作者
论文摘要
加密算法实现很容易受到冷启动攻击的影响,该攻击包括利用跨重新启动的RAM单元的持久性或降低周期的动力以读取内存内容并恢复宝贵的敏感数据。针对冷靴子攻击的主要防御武器是内存加密。在这项工作中,我们提出了Memshield,这是一个用于利用GPU安全存储主键并执行加密/解密操作的用户空间应用程序的内存加密框架。我们开发了一个针对现有应用程序完全透明的原型,并且不需要更改OS内核。我们讨论了设计,相关工作,实现,安全分析和MEMSHIELD的性能。
Cryptographic algorithm implementations are vulnerable to Cold Boot attacks, which consist in exploiting the persistence of RAM cells across reboots or power down cycles to read the memory contents and recover precious sensitive data. The principal defensive weapon against Cold Boot attacks is memory encryption. In this work we propose MemShield, a memory encryption framework for user space applications that exploits a GPU to safely store the master key and perform the encryption/decryption operations. We developed a prototype that is completely transparent to existing applications and does not require changes to the OS kernel. We discuss the design, the related works, the implementation, the security analysis, and the performances of MemShield.