基于硬件协同的内存完整性保护方法

发布时间：2018-09-08 17:48

【摘要】：目前针对存储系统的攻击行为层出不穷,已出现多种存储器保护机制,但其大多是在处理器中加入计算部件,需较大空间存储校验数据,这不但增加了处理器负担,存储开销也很大。针对此问题进行了研究,依据协同认证的思想,提出一种附加硬件的内存完整性保护方法 MIPIC,其关键是在内存中加入一种具有计算功能的硬件部件,由处理器与该部件协同完成内存数据完整性校验。将MIPIC与CHTree比较,从存储增益等角度进行了性能分析,从认证方案性能等方面进行了实验模拟。分析和实验证明,MIPIC有更低的计算开销和存储开销。
[Abstract]:At present, there are many kinds of memory protection mechanisms, but most of them are to add computing parts to the processor, which need more space to store the check data, which not only increases the burden of the processor, but also increases the load of the processor. Storage is also expensive. Aiming at this problem, according to the idea of cooperative authentication, a memory integrity protection method of additional hardware, MIPIC, is proposed. The key is to add a kind of computing hardware component to the memory. The memory data integrity check is completed by the processor in cooperation with the component. By comparing MIPIC with CHTree, the performance analysis is carried out from the point of view of storage gain, and the performance of authentication scheme is simulated. Analysis and experiments show that MIPIC has lower computational and storage costs.
【作者单位】：黑龙江科技大学计算机与信息工程学院;哈尔滨工程大学自动化学院;哈尔滨工程大学计算机科学技术与技术学院;
【基金】：黑龙江省教育厅科学技术研究项目(12533052) 国家自然科学基金资助项目(61073047)
【分类号】：TP309;TP333

【共引文献】