• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>IEEE International Systems Conference >Trusted Inter-Process Communication Using Hardware Enclaves
【24h】

Trusted Inter-Process Communication Using Hardware Enclaves

机译：使用硬件环形的可信地区间通信

获取原文
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Inter-Process Communication (IPC) enables applications to share information in a local or distributed environment, allowing them to communicate with each other in a coordinated manner. In modern systems this mechanism is extremely important, as even local applications can run parallel tasks in multiple processes in the machine, needing to exchange information to coordinate their execution, and optimizing the exchange of data in a more efficient way. The security in IPC relies on the integrity and confidentiality of the messages exchanged in such an environment, as messages exchanged between different processes can be targeted by attacks that seek to obtain sensitive data or to manipulate the application behavior. A Trusted Execution Environment (TEE) can be used to enable an isolated execution of the IPC mechanism to mitigate such attacks. In this paper we propose the adoption of the Intel Software Guard Extensions (SGX) architecture to provide data confidentiality and integrity in message exchange between processes, by using hardware instructions and primitives to encrypt and authenticate the messages. Our approach highlights a threat model and compares the solution proposed with two other scenarios, showing a feasible solution for security and an approach that can be applied to standard IPC mechanisms with small processing overhead.
机译：进程间通信（IPC）使应用程序能够在本地或分布式环境中共享信息，允许它们以协调的方式互相通信。在现代系统中，这种机制非常重要，因为即使本地应用程序也可以在机器中的多个进程中运行并行任务，需要交换信息以协调其执行，并以更有效的方式优化数据交换。 IPC中的安全性依赖于在这种环境中交换的消息的完整性和机密性，因为在不同进程之间交换的消息可以通过寻求获得敏感数据或操纵应用程序行为的攻击来定位。可信执行环境（TEE）可用于启用IPC机制的隔离执行以减轻此类攻击。在本文中，我们提出了采用英特尔软件保护扩展（SGX）架构，通过使用硬件指令和原语来加密和验证消息，在流程之间的消息交换中提供数据机密性和完整性。我们的方法突出了威胁模型，并将解决方案与另外两个场景进行比较，显示了用于安全性的可行解决方案，以及可以应用于具有小处理开销的标准IPC机制的方法。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号