DMCA
Memoir: Practical State Continuity for Protected Modules
| Citations: | 26 - 7 self |
BibTeX
@MISC{Parno_memoir:practical,
author = {Bryan Parno and Jacob R. Lorch and John R. Douceur and James Mickens and Jonathan M. Mccune},
title = {Memoir: Practical State Continuity for Protected Modules},
year = {}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
Abstract—To protect computation, a security architecture must safeguard not only the software that performs it but also the state on which the software operates. This requires more than just preserving state confidentiality and integrity, since, e.g., software may err if its state is rolled back to a correct but stale version. For this reason, we present Memoir, the first system that fully ensures the continuity of a protected software module’s state. In other words, it ensures that a module’s state remains persistently and completely inviolate. A key contribution of Memoir is a technique to ensure rollback resistance without making the system vulnerable to system crashes. It does this by using a deterministic module, storing a concise summary of the module’s request history in protected NVRAM, and allowing only safe request replays after crashes. Since frequent NVRAM writes are impractical on modern hardware, we present a novel way to leverage limited trusted hardware to minimize such writes. To ensure the correctness of our design, we develop formal, machine-verified proofs of safety. To demonstrate Memoir’s practicality, we have built it and conducted evaluations demonstrating that it achieves reasonable performance on real hardware. Furthermore, by building three useful Memoir-protected modules that rely critically on state continuity, we demonstrate Memoir’s versatility.
Keyphrases
practical state continuity protected module memoir versatility concise summary useful memoir-protected module module request history frequent nvram writes modern hardware state confidentiality module state system crash real hardware rollback resistance state continuity protected nvram memoir practicality reasonable performance security architecture deterministic module protected software module state safe request replay novel way machine-verified proof key contribution first system stale version
