首页> 外文期刊>Journal of network and computer applications >Adaptive security management of real-time storage applications over NAND based storage systems
【24h】

Adaptive security management of real-time storage applications over NAND based storage systems

机译:基于NAND的存储系统上实时存储应用程序的自适应安全管理

获取原文
获取原文并翻译 | 示例
           

摘要

Embedded devices are much easier to be stolen or lost due to the characteristics of mobility and less caring, which may result in the information disclosure and privacy loss without any security protection of critical data. With the advantages of low cost and fast access speed, non-volatile memories (NVMs) like NAND flash memory have become a critical component in building security-critical real-time embedded devices. Therefore, to improve the security protection of NVM-based embedded systems becomes a great challenge. In this paper, we are interested in online optimization of security-sensitive storage applications over modern NVM-based embedded systems, whose workloads are unpredictable but have explicit timing constraint and certain security constraint. Sensitive data must be stored before a specific deadline, otherwise it will lose its validity. To address these challenges, this paper presents a Feedback Vulnerability and Utilization Control (FVUC) mechanism. FVUC employs two proportional-integral controllers, the Utilization Controller and the Vulnerability Controller, to build a big feedback loop which dynamically monitors the system run-time status as well as decides how many flash pages would be encrypted by a cryptography service. Relied on the accurate model and design, FVUC can make a balance between the utilization and vulnerability, and achieve a better overall performance. Based on synthetic experiments, we obtain that FVUC can fully beat other three mechanisms on the overall performance with acceptable time overhead. Equipped with proportional-integral controller, FVUC can make the system more stable than the one with only proportional controller. The proposed mechanism can be utilized to resist on-line confidential attack and even achieve the off-line privacy protection when embedded devices are lost or stolen. (C) 2015 Elsevier Ltd. All rights reserved.
机译:嵌入式设备由于具有移动性和较少维护的特性,很容易被盗或丢失,这可能导致信息泄露和隐私丢失,而没有任何关键数据的安全保护。凭借低成本和快速访问的优势,诸如NAND闪存之类的非易失性存储器(NVM)已成为构建对安全性至关重要的实时嵌入式设备的重要组成部分。因此,提高基于NVM的嵌入式系统的安全保护成为一项巨大的挑战。在本文中,我们对基于现代NVM的嵌入式系统上对安全性敏感的存储应用程序的在线优化感兴趣,这些应用程序的工作负载不可预测,但具有明确的时序约束和某些安全约束。敏感数据必须在特定的截止日期之前存储,否则它将失去有效性。为了解决这些挑战,本文提出了一种反馈漏洞和利用控制(FVUC)机制。 FVUC使用两个比例积分控制器,即“利用率控制器”和“漏洞控制器”,以建立一个大的反馈回路,该回路动态监视系统运行时状态,并确定加密服务将加密多少闪存页。依靠准确的模型和设计,FVUC可以在利用率和漏洞之间取得平衡,并获得更好的整体性能。基于综合实验,我们得出FVUC可以在可接受的时间开销下完全击败其他三个机制的整体性能。配备比例积分控制器,FVUC可使系统比仅具有比例控制器的系统更稳定。所提出的机制可用于抵抗在线机密攻击,甚至在嵌入式设备丢失或被盗时实现离线隐私保护。 (C)2015 Elsevier Ltd.保留所有权利。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号